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VENDORS  MAKE  A 
WIRELESS  END  RUN 


Immediate  need  for  better  wireless  LAN 
security  compels  group  to  bypass  IEEE 


BY  BOB  BREW1N 

Microsoft  Corp.,  Cisco  Sys¬ 
tems  Inc.  and  major  wireless 
LAN  hardware  manufacturers 
have  joined  forces  to  beef  up 
security  for  802.11b  wireless 
LAN  products  through  a  proj¬ 
ect  dubbed  Safe  Secure  Net¬ 
works,  Computer-world  has 
learned.  An  announcement  is 
slated  for  next  month. 

The  SSN  project  grew  out  of 
a  multivendor  initiative  kicked 
off  earlier  this  year  to  address 
known  weaknesses  in  the 
Wired  Equivalent  Privacy  pro¬ 
tocol,  said  Warren  Barkley,  lead 


program  manager  for  wireless 
in  Microsoft’s  Windows  divi¬ 
sion.  Building  security  beyond 
WEP  into  wireless  LAN  prod¬ 
ucts  would  help  users  guard 
against  hacker  intrusions. 

The  SSN  partners  include 
semiconductor  manufacturer 
Intersil  Corp.  and  enterprise 
wireless  LAN  hardware  mak- 

Wi-Fi  Weaknesses 

For  access  to  all  Computerworld  stories 
on  wireless  LAN  security  issues,  visit 
our  Mobile/Wireless  Knowledge  Center: 

QuickLink  klOOO 
www.computemorld.com 


ers  Agere  Systems  Inc.,  Symbol 
Technologies  Inc.  and  Proxim 
Corp.  Barkley  said  the  group 
plans  to  adopt  a  technology 
called  Temporal  Key  Integrity 
Protocol  ahead  of  its  final  ap¬ 
proval  by  the  Institute  of  Elec¬ 
trical  and  Electronics  Engi¬ 
neers  Inc.’s  802.i  standards 
body.  He  added  that  the  SSN 
partners  have  worked  to  en¬ 
sure  that  the  TKIP  fix  is  com¬ 
patible  with  the  existing  in¬ 
stalled  802.11b,  or  Wi-Fi,  hard¬ 
ware  base.  That’s  a  key  issue 
for  businesses  as  well  as  home 
users,  who  have  installed  mil¬ 
lions  of  wireless  LAN  access 
points  and  cards. 

TKIP  defeats  hacking  by 
providing  users  with  dynamic 
Wireless  LANs,  page  16 


DEVELOPERS  RE-EXAMINE  RICH-CUENT  APPS 


Coders  begirt  to  catch 
on  to  features  in  .Net 


BY  CAROL  SLIWA 

ORLANDO 

Some  corporate  developers 
last  week  said  they  will  consid¬ 
er  switching  from  Web  appli¬ 
cations  back  to  their  old,  famil¬ 
iar  rich-client  applications  be¬ 
cause  of  unpromoted  features 
that  they’re  just  now  discover¬ 
ing  in  Microsoft  Corp.’s  .Net 
framework. 

Many  developers  had  shifted 


to  Web  browser-based  clients 
because  that  soothed  the  head¬ 
aches  they  had  encountered 
when  developing,  distributing, 
deploying  and  maintaining 
rich-client  applications.  The 
trade-off  was  that  they  lost  the 
highly  graphical  user  interfaces 
and,  in  some  cases,  intensive 
data  entry  and  calculation  ca¬ 
pabilities  that  many  users  had 
grown  to  expect. 

“Sometimes  we  had  to  tell 
the  client  that  what  they  want¬ 
ed  was  unrealistic  for  the  Web 
platform,”  said  Marc  Ginns,  an 


application  analyst  at  Duke  En¬ 
ergy  Corp.  in  Charlotte,  N.C. 

Ginns  said  his  firm’s  new  de¬ 
velopment  focused  largely  on 
Web  applications,  following 
Microsoft’s  lead.  But  he  said 
his  group  will  re-evaluate  its 
Web  thrust,  based  on  new  fea¬ 
tures  in  the  .Net  framework 
such  as  the  Windows  Forms 
set  of  class  libraries  and  design 
Rich-Client  Apps,  page  57 


The  .Net  Framework 

What  it  is  Microsoft’s  pro¬ 
gramming  model  for  develop¬ 
ing,  deploying  and  running 
applications  and  XML  Web 
services. 

How  users  get  it:  In  Service 
Pack  1  for  Windows  XP,  Win¬ 
dows  update.  The  framework 
can  also  be  distributed  with 
an  application  that  uses  it. 

What  operating  systems  it 
will  run  on:  Windows  98,  NT 
4.0,  Me,  2000  and  XP, 


INNOVATIVE 

TECHNOLOGY 


2002  AWARDS 


Whether  they’re  getting  connected  with 
trading  partners  faster,  slicing  billing  cycles 
or  fending  off  computer  viruses,  IT  managers 
are  strengthening  their  businesses  with 
”  help  from  their  technology  providers.  For 

Computerworld' s  first  annual  Innovative  Technology  Awards,  satisfied 
IT  customers  helped  us  choose  the  top  10  vendors  that  are  helping 
them  achieve  business  payback.  Some  highlights  of  our  special  report: 


■  Content  management 
software  helps  mechanics 
at  US  Airways  find  repair 
information  faster. 

■  A  device  filter  fights  back 
hacker  attacks  for  MTV.com 
during  its  fall  video  awards. 

■  Optical  technology  enables 
a  Seattle  hotel  to  meet  the 
variable  bandwidth  demands 
of  its  high-tech  guests. 

REPORT  BEGINS  ON  PAGE  26. 


CYBERDEFENSE  PLAN  GETS  MIXED  REVIEWS 


Raises  awareness,  but 
critics  say  it  lacks  teeth 


BY  DAN  VERTON 

The  White  House’s  National 
Strategy  to  Secure  Cyberspace, 
released  last  week  in  draft  form, 
was  applauded  by  some  IT  in¬ 
dustry  executives  for  its  vision. 
But  the  ink  was  barely  dry  be¬ 
fore  critics  charged  that  the 
plan  lacks  the  authority  neces¬ 
sary  to  accomplish  real  change. 

“Anything  that  could  have 
made  a  difference  was  re¬ 
moved  at  the  last  minute,”  said 
the  president  of  a  major  securi¬ 


ty  consulting  firm  who  re¬ 
quested  anonymity. 

While  the  government  got 
high  marks  for  its  effort  to 
raise  awareness  of  security  is¬ 
sues  and  its  willingness  to  take 
on  a  leadership  role,  some  pri¬ 
vate-sector  security  experts 
were  surprised  by  the  lack  of 
tough  enforcement  language  in 
the  document.  In  fact,  a  White 
House  source  acknowledged 
that  major  changes,  such  as  the 
removal  of  “politically  sensi¬ 
tive  language,”  were  made  to 
the  plan  in  the  last  24  hours  of 
preparation. 

Cyberdefense,  page  57 
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When  .NET  connected  software  helps  you  quickly  connect  islands  of  data  into  one  clear  picture  for  your  employees,  that’s 
one  degree  of  separation.  All  too  often,  data  critical  to  internal  decision-making  is  scattered  throughout  your  enterprise,  and  you  need  to 
collect  and  present  it  in  a  way  that  makes  sense— quickly.  Microsoft®  SQL  Server™  2000  Enterprise  Edition  with  Analysis  Services  unifies  and 
analyzes  data  from  various  systems  using  Data  Mining  and  Data  Transformation  Services.  Analytics  built  into  Data  Analyzer  make  information 
available  immediately  to  the  employees  who  require  it,  in  a  way  that  makes  decision-making  easier  and  more  effective.  And  that’s  important, 
because  when  vital  decisions  are  put  off,  so  are  profits.  That’s  one  degree  of  separation.  That’s  business  intelligence  with  .NET.  Find  out  how 
.NET  connected  software  can  help  you  see  the  big  picture.  Go  to  microsoft.com/enterprlse  Software  for  the  Agile  Business. 
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V. 


CompUSA  used  Microsoft  SQL  Server  2000  with  Analysis  Services  and  Data  Transformation  Services  to  extract  point-of-sale 
data  from  228  stores ,  150  applications,  and  numerous  databases,  and  then  integrate  the  information  into  one  data  warehouse. 

Now,  not  only  are  employees  able  to  get  a  clearer  picture  of  the  business  at  large,  but  the 
quick  delivery  of  data  means  they  can  adjust  to  meet  opportunities  as  they  knock. 
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ca  smart  Program  Guideline: 


The  ca  smart  logo  is  only  to  be  used  by  CA 
partners  for  innovative  eBusiness  products 
or  solutions  on  which  CA  technology  resides, 
is  a  component  of,  or  is  otherwise  integrated. 
Which  would  not  include  sporting  goods. 

For  more  information,  visit  ca.com/casmart. 
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WORTH  MAKING  THE  MOVE? 

Faster  speeds  and  lower  support  costs  —  not 
the  zero  purchase  price  —  make  Linux  worth 
deploying,  says  Ed  Wojciechowski  (left)  at 
packaging  company  Menasha  Corp.  PAGE  42 


SINGING  FOR 
THEMSELVES 

Treating  prima  donnas  like 
other  employees  may  be  a 
mistake.  Read  about  how  to 
tone  down  their  behavior  to 
enhance  staff  harmony  and 
productivity.  PAGE  46 
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NEWS  6 

6  Slumping  Sun  attempts  to  jump- 
start  sales  with  new  management 
software  and  desktop  initiatives. 

7  IBM  is  convinced  that  now  is 

the  right  time  to  raise  the  price  of 
its  DB2  enterprise  edition. 

10  EDS  renews  negotiations  for 
an  outsourcing  deal  with  Proctor 
&  Gamble  that  could  be  worth 
$10  billion. 

12  The  nanotechnology  race  is 
heating  up  as  the  U.S.  faces  com¬ 
petition  from  Europe  and  Asia. 

14  More  sophisticated  ROI  met¬ 
rics  are  being  used  by  a  growing 
number  of  IT  leaders. 

19  IBM  and  Intel  team  up  to  de¬ 
velop  a  high-density  blade  server. 


BREAKIN6  NEWS 

For  breaking  news,  updated  twice  daily,  visit: 

QuickLink  a1510 
www.computerworld.com 


TECHNOLOGY  25 

25  The  emerging  Object-Based 
Storage  Device  Commands  spec¬ 
ification  is  the  first  step  toward 
SAN/NAS  convergence,  writes 
Computerworld’ s  Robert  L.  Mitchell. 

26  Innovative  Technology 
Awards  2002:  Computerworld 
presents  the  10  winners  of  this 
first  annual  awards  program.  The 
winning  vendors,  which  were 
nominated  by  IT  customers,  offer 
leading-edge  products  and  services 
that  provide  measurable  payback 
on  investment.  Also:  brief  profiles 
of  the  10  companies  that  earned 
honorable  mentions. 

38  Security  Journal:  when 

someone  —  or  something  — 
begins  generating  port  scans  of 
Defense  Intelligence  Agency  com¬ 
puters  from  inside  the  corporate 
firewall,  Vince  Tuesday  trades  a 
good  night’s  sleep  for  a  midnight 
stint  tracking  down  the  culprit. 


MANAGEMENT  41 

41  Guest  CIO  columnist  Eric 

Goldfarb  says  traditional  employ¬ 
ment  benefits  associated  with 
seniority  and  loyalty  are  dead. 

The  future  belongs  to  IT  workers 
who  upgrade  their  skills,  stay  flex¬ 
ible  and  deliver  more  value  than 
it  costs  their  companies  to  keep 
them  on  the  payroll. 

48  It’s  never  easy  to  deliver  bad 
news  or  corrective  feedback  — 
especially  in  IT.  But  with  a  little 
planning  and  practice,  managers 
can  hone  their  skills  at  offering 
criticism  that  helps  employees. 

50  Workstyles:  Since  separating 
from  Hoechst,  chemical  manu¬ 
facturer  Celanese  has  been  work¬ 
ing  to  centralize  its  global  IT  and 
keep  its  culture  lively  and  informal. 

50  Career  Adviser:  Fran  Quittei 
counsels  a  systems  engineer  in  the 
telecommunications  industry  on 
where  to  look  for  better  opportuni¬ 
ties,  and  a  veteran  Unix  systems  ad¬ 
ministrator  on  bolstering  his  skills. 


OPINIONS  22 

22  Maryfran  Johnson  says  that 
no  matter  how  tight  your  budget  is, 
the  right  technology  with  the  right 
ROI  can  be  just  around  the  corner. 
But  finding  the  best  product  means 
sifting  through  a  lot  of  hype. 

22  Pimm  Fox  discovers  that  a 
savvy  desktop  management  strat¬ 
egy  helped  one  company  cut  costs 
and  eliminate  a  potential  software- 
license  compliance  problem. 

23  Dan  Gillmor  knows  why  trade 
shows  have  lost  their  luster  for 
many  IT  managers.  But  he  still 
finds  good  reasons  why  you  should 
consider  attending. 

58  Frank  Hayes  says  readers  are 
right:  Cobol  isn’t  dead,  after  all. 

But  will  it  ever  be  king  of  IT  again? 
For  companies  seeking  a  competi¬ 
tive  advantage,  it  just  might. 
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TECH  REPORTS 

Visit  the  Computerworld  store 
online  to  purchase  Executive  Brief¬ 
ing  reports  on  security,  storage, 
ROI  and  more. 

QuickLink  a2420 


SECURITY  PLAN 

What  do  you  think  of  the  Bush 
administration’s  new  cybersecurity 
plan?  After  reading  the  story  on 
Page  One,  post  your  opinions  in 
our  discussion  forum  and  read 
what  others  have  to  say. 

QuickLink  a2510 


BEST  OF  THE  WEB 

New  in  our  topic-based  Knowledge 
Centers:  a  roundup  of  the  latest 
news,  tutorials  and  more  from 
around  the  Internet.  See  the  first 
subject-specific  WebLog  in  our 
Application  Development  Knowl¬ 
edge  Center. 

QuickLink  a2500 


WHAT'S  A  QUICKLINK? 

OOn  some  pages  in  this  issue, 
you’ll  see  a  QuickLink  code 
pointing  to  additional,  related  con¬ 
tent  on  our  Web  site.  Just  enter  that 
code  into  our  QuickLink  box,  which 
you’ll  see  at  the  top  of  each  page  on 
our  site. 

Use  QuickLinks  to  see  related 
stories,  discussion  forums,  research 
links,  archives  and  more. 
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HP,  8EA  to  Detail 
App  Server  Deal 


Hewlett-Packard  Co.  today  plans  to 
announce  that  it  will  bundle  a  trial 
version  of  BEA  Systems  lnc.’s 
WebLogic  application  server  soft¬ 
ware  with  all  of  its  servers,  starting 
with  those  running  HP-UX.  HP  said 
in  July  that  it  was  dropping  its  own 
Java-based  Netaction  software  in 
favor  of  a  joint  sales  deal  with  BEA 
[QuickLink  31481].  In  return,  San 
Jose-based  BEA  will  promote  HP’s 
OpenView  management  tools. 


Feds  Extend  Net 
Contract  With  ICANN 

The  U.S.  Department  of  Commerce 
has  decided  to  extend  for  another 
year  the  agreement  under  which  the 
Internet  Corporation  for  Assigned 
Names  and  Numbers  (ICANN)  man¬ 
ages  the  Domain  Name  System.  But 
the  agency  said  that  it  wants  Marina 
Del  Rey,  Calif.-based  ICANN  to 
speed  up  a  review  of  the  Internet 
root  server  system’s  security, 
among  other  things. 


Ellison  Steps  Down 
From  Apple's  Board 

Apple  Computer  Inc.  announced 
that  Oracle  Corp.  CEO  Larry  Ellison 
is  resigning  from  its  board  of  direc¬ 
tors.  Ellison  said  in  a  statement  that 
his  schedule  doesn’t  allow  him  “to 
attend  enough  of  the  formal  board 
meetings  to  warrant  a  role  as  a  di¬ 
rector.”  He  has  been  a  member  of 
Apple’s  board  since  1997. 


Short  Takes 

Blue  Bell,  Pa.-based  UNISYS  CORP. 
this  week  plans  to  expand  its 
ClearPath  server  line  by  adding  a 
model  with  new  workload  and  per¬ 
formance  management  tools. . . . 
CISCO  SYSTEMS  INC.  released 
patches  to  plug  a  pair  of  security 
holes  in  the  Linux,  Solaris  and  Mac¬ 
intosh  versions  of  its  VPN  5000 
Client  software,  which  offers  virtual 
private  networking  capabilities. 


Eclipsed  Sun  Tries  to  Brighten 
Horizon  With  New  Initiatives 


Moves  seen  as 
challenges  to  HP, 
Microsoft,  IBM 


BY  JAIKUMAR  VIJAYAN 

SAN  FRANCISCO 

UN  MICROSYSTEMS 
Inc.  is  hoping  to  re¬ 
gain  some  of  its  lost 
momentum  with  ma¬ 
jor  new  initiatives 
aimed  at  giving  corporations 
better  control  of  their  data 
center  assets  and  an  alterna¬ 
tive  to  Microsoft  Corp.  tech¬ 
nologies  on  the  desktop. 

At  the  SunNetwork  2002 
user  conference  here  last 
week,  Sun  executives  an¬ 
nounced  an  enterprise  desktop 
initiative  code-named  Mad 
Hatter,  under  which  the  com¬ 
pany  will  deliver  preconfig- 
ured  desktop  bundles  running 
Linux  with  Sun’s  StarOffice 
and  other  open-source  office 
productivity  software. 

Sun  fleshed  out  details  of 
another  long-term  initiative, 
called  Nl,  under  which  it  will 
develop  management  software 
that  it  says  will  help  users  ad¬ 
minister  and  use  their  data 


Sun  Microsystems  faces  an  uphill 
challenge  in  trying  to  push  its  Lin¬ 
ux-based  desktop  office  productivi¬ 
ty  offering  against  Microsoft’s  long- 
established  client  software,  ana¬ 
lysts  said  last  week. 

But  it  might  find  an  audience  in 
certain  vertical  market  segments 
and  among  corporate  users  who 
are  looking  for  an  alternative  to  Mi¬ 
crosoft  in  the  wake  of  that  compa¬ 
ny’s  unpopular  new  subscription¬ 
pricing  scheme,  they  added. 

Sun  last  week  introduced  a  bun¬ 
dled  desktop  offering  featuring 
vanilla  Intel  Corp.  hardware,  Linux, 
Sun’s  StarOffice  productivity  suite 
and  open-source  software  such  as 
the  Mozilla  Web  browser,  Evolution 


center  computing  resources 
far  more  cost-effectively. 

The  company  also  outlined  a 
new  delivery  strategy  for  its 
high-end  systems  under  which 
it  will  increasingly  let  compa¬ 
nies  order  systems  that  are 
configured  to  their  specific  re¬ 
quirements.  Sun  will  deliver 
such  preconfigured  bundles 
using  integration  and  consult¬ 
ing  services  from  its  iForce 
channel  partners  and  systems 
integrators. 

The  aim  of  efforts  such  as 
those  is  to  reduce  complexity 
and  the  cost  of  technology  ac¬ 
quisition  and  ownership,  CEO 
Scott  McNealy  said  in  his 
keynote  address. 

“The  No.  1  issue  on  customer 
minds  is  cost.  Our  biggest 
competitor  is  the  chief  finan¬ 
cial  officer,”  McNealy  said. 

Sun’s  strategy  makes  com¬ 
petitive  sense,  said  Jean  Boz- 
man,  an  analyst  at  IDC  in 
Framingham,  Mass.  “Sun  is 
smaller  than  IBM  and  Hewlett- 
Packard,  yet  they  have  to  com¬ 
pete  with  them  in  every  way,” 
Bozman  said. 

What  Sun  is  attempting  to 
do  is  give  users  a  technology 
portfolio  that  ranges  from  the 
desktop  to  high-end  servers 


e-mail  client  and  the  GNU  Object 
Model  Environment  interface.  The 
client  desktop  hardware,  which  Sun 
will  sell  in  one  standard  configura¬ 
tion  only,  will  also  include  support 
for  Java  card  technology  for  authen¬ 
ticating  user  access  to  applications. 

Sun  will  sell  the  technology  in 
100-unit  bundles  that  will  also  in¬ 
clude  a  server  for  identity  manage¬ 
ment  and  portal  and  messaging  ca¬ 
pabilities.  Sun  didn’t  disclose  pric¬ 
ing  for  its  configuration,  which  it 
hopes  to  start  shipping  sometime  in 
the  first  half  of  next  year. 

But  users  can  expect  to  see  sub¬ 
stantial  savings  in  acquisition  costs 
and  total  costs  of  ownership,  said 
Jonathan  Schwartz,  Sun’s  vice 


A  New  Dawn 


The  following  were  among 
the  products  and  initiatives 
announced  at  SunNetwork: 

■  Linux-based  Open  Enterprise 
Client  software  and  hardware 

■  A  security  service  called 
Perimeter  Defense  and  Secure 
Web  Server 

■  The  Nl  initiative  for  helping 
companies  better  manage  data 
center  computing  resources 


and  offers  an  alternative  to  Mi¬ 
crosoft,  analysts  said. 

With  Sun’s  desktop  stack,  for 
instance,  users  get  office  pro¬ 
ductivity,  browser,  mail  and 
Web  server  software  that  inter¬ 
operates  completely  with  Mi¬ 
crosoft’s  offerings  at  a  per-user 
cost  that’s  less  than  $50  per 
month,  compared  with  more 
than  $150  for  Microsoft  soft¬ 
ware,  according  to  Jonathan 
Schwartz,  Sun’s  vice  president 
of  software. 

Despite  the  obvious  appeal, 

Sun  is  still  “fighting  an  uphill 
battle,”  said  Phil  Black,  manag¬ 
er  of  infrastructure  services  at 
Petro-Canada  in  Calgary,  Al¬ 
berta.  Although  Sun’s  desktop 


president  in  charge  of  software. 

The  increased  availability  and 
acceptance  of  Linux  and  of  open- 
source  software  makes  such  an  of¬ 
fering  attractive  to  some  compa¬ 
nies,  said  Mark  Tolliver,  Sun’s  chief 
strategy  officer. 

Sun’s  desktop  offerings  hold  a 
lot  of  promise  in  areas  where  cost 
and  security  are  an  issue,  such  as 
call  centers  and  educational  institu¬ 
tions,  he  said. 

The  resentment  generated  by 
Microsoft’s  Software  Assurance 
program  might  also  make  Sun’s 
pitch  appealing  for  some  users, 
said  Michael  Dortch,  an  analyst  at 
Robert  Frances  Group,  particularly 
considering  that  Sun  already  has  a 
presence  in  many  companies. 

-  Jaikumar  Vijayan 


stack  might  make  sense  in  rela¬ 
tively  small  environments, 
large  users  will  find  it  a  major 
challenge  to  introduce  and  in¬ 
tegrate  it  into  existing  Micro¬ 
soft  environments,  he  said. 

Microsoft  Ho  Pushover 

“StarOffice  is  a  great  alter¬ 
native  to  Microsoft  Office.  But 
it  still  remains  to  be  seen  if 
Sun’s  innovation  can  overcome 
Microsoft’s  market  presence 
and  inertia,”  said  analyst  Mich¬ 
ael  Dortch  at  Robert  Frances 
Group  Inc.  in  San  Francisco. 

Meanwhile,  Solaris  will  con¬ 
tinue  to  be  Sun’s  standard- 
bearer  on  the  high  end, 
Schwartz  said.  And  going  for¬ 
ward,  the  company  will  in¬ 
creasingly  bundle  more  of  its 
now-separate  Sun  Open  Net 
Environment  software  stack 
into  Solaris,  he  added. 

SunNetwork  —  Sun’s  first 
user  show  in  10  years  —  comes 
at  a  tough  time  for  the  compa¬ 
ny.  Though  it’s  still  the  Unix 
market  leader  and  had  revenue 
of  more  than  $3.5  billion  in  the 
last  quarter,  Sun  has  failed  to 
make  a  profit  in  three  of  its 
past  four  quarters.  Its  stock  — 
which  traded  at  above  $60 
about  18  months  ago  —  is  now 
languishing  at  less  than  $3. 

Sun’s  exposure  to  the  eco¬ 
nomic  slowdown  has  been  es¬ 
pecially  severe  because  of  its 
dependency  on  the  telecom¬ 
munications  and  financial  ser¬ 
vices  markets,  said  Mark  Tol¬ 
liver,  Sun’s  chief  strategy  offi¬ 
cer.  The  meltdown  of  those 
two  sectors  —  both  of  which 
played  a  major  role  in  Sun’s  ex¬ 
traordinary  growth  of  the  past 
few  years  —  has  hurt  the  com¬ 
pany,  Tolliver  said.  As  a  result, 
expect  to  see  Sun  make  more 
of  an  effort  in  areas  such  as 
health  care,  biotechnology  and 
energy,  he  said.  > 


STILL  HAZY 

Sun's  Nl  vision  is  expected  to 
materialize  slowly: 
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Gambling  on  the  Linux  Desktop 
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Demand  for  U.S.  IT  Workers  Remains  Soft,  Survey  Shows 

ITAA/Dice  report  says  hiring  rebound  still 
on  hold;  some  blame  offshore  outsourcing 


BY  THOMAS  HOFFMAN 

Although  the  U.S.  IT  work¬ 
force  has  grown  by  1%  since 
the  beginning  of  the  year,  the 
short-term  hiring  outlook  re¬ 
mains  bleak,  according  to  an 
updated  report  being  released 
today  by  the  Information  Tech¬ 
nology  Association  of  America 
(ITAA)  and  Dice  Inc. 

Telephone  interviews  con¬ 
ducted  in  July  and  August  with 
hiring  managers  at  84  IT  ven¬ 
dor  companies  and  216  non-IT 
companies  revealed  that  “the 
original  optimistic  hiring  fore¬ 
cast  at  the  beginning  of  the 
year  has  been  tempered  by  the 
economy,”  said  Scot  Melland, 
president  and  CEO  of  Dice,  a 
New  York-based  provider  of 
online  recruiting  services  for 
technology  professionals. 

Many  unemployed  IT  work¬ 
ers  are  shifting  the  blame  else¬ 
where.  Computerworld  regu¬ 
larly  receives  letters  from  dis¬ 
gruntled  IT  professionals  who 


claim  that  they  have  in-demand 
skills  such  as  C++,  Java  and  Or¬ 
acle  training  and  yet  haven’t 
been  able  to  find  work  for 
months.  Many  of  them  point 
the  finger  at  H-1B  visa  holders 
and  offshore  programming 
outfits,  where  a  growing  num¬ 
ber  of  companies  are  shifting 
their  development  and  mainte¬ 
nance  work  to  reduce  costs. 

Influence  From  Overseas 

The  U.S.  General  Account¬ 
ing  Office  is  about  to  embark 
on  a  study  of  the  impact  of  the 
H-1B  visa  program  on  U.S.  jobs 
[QuickLink  32835J.  The  results 
of  that  study  are  due  next  year. 

But  some  IT  professionals 
say  offshore  outsourcing  is 
having  a  more  significant  and 
longer-term  impact  on  U.S.  IT 
workers. 

Outsourcing  not  only  leads 
to  job  cuts;  it  also  allows  cor¬ 
porations  to  avoid  paying  un¬ 
employment  taxes  when  de¬ 


mand  for  labor  slackens,  said 
Norman  A.  Lane,  president  of 
Aztech  Professional  Services 
Inc.,  a  Phoenix-based  consult¬ 
ing  and  contracting  firm.  Lane 
contends  that  to  prevent  tax 
losses  to  the  federal  govern¬ 
ment,  U.S.  companies  that  en¬ 
gage  in  offshore  outsourcing 
should  pay  a  levy  “on  every 
outsourced  job  to  compensate 
U.S.  taxpayers.” 

ITAA  President  Harris  Mil¬ 
ler  has  been  a  lightning  rod  for 
H-1B  critics,  since  the  Arling¬ 
ton,  Va.-based  trade  associa¬ 
tion  is  largely  made  up  of  tech¬ 
nology  vendors  such  as  IBM, 
Cisco  Systems  Inc.  and  others 
who  have  made  extensive  use 
of  foreign  IT  specialists.  While 
he  said  he  believes  the  econo¬ 
my  has  been  the  biggest  cul¬ 
prit,  even  he  acknowledges 
that  offshore  programming  “is 
having  an  impact”  on  the  U.S. 
IT  job  market. 

“The  real  challenge  is  off¬ 
shore  programming  —  not  the 
few  thousand  [IT  workers]  that 
come  to  the  U.S.,  but  the  work¬ 
ers  in  Ireland  and  South  Africa 
and  India  that  are  paid  much 


less  to  do  the  work,”  said  Mil¬ 
ler.  “I  think  there  is  more  work 
going  offshore  in  part  due  to 
the  pressure  to  keep  costs 
down,  and  there’s  huge  down¬ 
ward  pressure  on  software 
vendors  to  keep  their  labor 


■  The  U.S.  IT  workforce  has 
grown  by  a  net  85,437  posi¬ 
tions  since  January,  from 
9,895,916  jobs  to  9,981,353. 

■  Employers  added  782,466 
IT  workers  and  dismissed 
697,029  IT  employees  during 
the  period. 

■  The  number  of  IT  worker  layoffs 
has  dropped  substantially  in  the 
past  12  months.  Between  Janu¬ 
ary  and  December  2001, 
companies  released  2.6 
million  IT  workers,  more  than 
218,000  per  month.  Between 
July  2001  and  June  2002,  the 
monthly  total  dropped  to  116,000. 

■  Companies  have  hired  far  fewer 


rates  down,”  he  added. 

“So  much  work  is  going  off¬ 
shore,  we’re  putting  ourselves 
at  a  substantial  [intellectual 
capital  and  security]  risk,”  said 
Linda  Mclnnis,  an  indepen¬ 
dent  contractor  and  head  of 
the  hiring  initiative  at  Boston- 
SPIN,  an  Acton,  Mass.-based 
group  of  1,200  Boston-area 
software  professionals.  I 


IT  workers  in  the  past  12  months. 

Between  January  and  Decem¬ 
ber  2001,  companies  hired 
2,090,492  IT  workers,  com¬ 
pared  with  1,564,931  workers  be¬ 
tween  July  2001  and  June  2002. 
Hiring  dipped  25%  during  this 
tracking  period. 

■  Top  in-demand  skills  haven't 
changed  much  since  earlier  this 
year.  C++,  Oracle,  SQL  and  Java 
remain  at  the  top  of  the  list, 

and  demand  for  these  skills  has 
held  steady  or  increased  slightly. 

■  If  current  hiring  trends  hold,  the 
total  U.S.  IT  workforce  will  reach 
just  over  10  million  workers  by  the 
end  of  the  year,  10%  below  expec¬ 
tations  earlier  in  2002. 


Base:  Telephone  interviews  with  hiring  managers  at  300  companies,  July  and  August  2002 

SOURCE.  THE  ITAA/DICE  ANNUAL  WORKFORCE  STUDY  "BOUNCING  BACK" 


Labor  Daze 

Key  findings  from  the  ITAA/Dice  updated  IT  workforce  study: 


IBM  Sets  Price  Increases  on 
Enterprise  Version  of  DB2 

Says  new  features  justify  database's  cost 


BY  MARC  L.  SONGINI 

IBM  is  adding  a  variety  of  fea¬ 
tures  to  the  next  version  of  its 
flagship  DB2  relational  data¬ 
base,  which  is  due  for  release 
in  November.  But  it’s  also 
adding  to  the  price  of  the  soft¬ 
ware’s  enterprise  edition. 

IBM  officials  last  week  dis¬ 
closed  that  Version  8  of  DB2 
Universal  Database  will  ship 
on  Nov.  21  for  Unix,  Linux  and 
Windows  systems.  As  part  of 
the  rollout,  they  said,  IBM 
plans  to  consolidate  its  DB2 
Enterprise  Edition  and  DB2 
Extended  Enterprise  Edition 
packages  into  one  offering 


priced  at  $25,000  per  CPU  — 
$5,000  more  than  what  the 
company  now  charges  for  the 
base  version  of  the  software. 

In  addition,  database  clus¬ 
tering  support  will  now  be  sold 
as  an  add-on  feature  costing 
$7,500  per  CPU.  Clustering  is 
currently  included  in  the  ex¬ 
tended  version  of  the  enter¬ 
prise  edition,  which  costs 
$25,000. 

But  IBM  isn’t  just  raising 
prices:  The  per-CPU  cost  for 
the  workgroup  version  of  DB2 
will  be  cut  from  $14,000  to 
$7,500,  the  company  said.  And 
IBM  officials  pointed  to  the 


new  functionality  that’s  com¬ 
ing  in  Version  8,  in  an  attempt 
to  justify  the  price  increases  at 
the  enterprise  level. 

“There’s  a  little  bump  in 
price  for  the  enterprise  ver¬ 
sion,  but  we  added  432  new 
features  to  this  release,”  said 
Jeff  Jones,  director  of  strategy 
at  IBM’s  data  man¬ 
agement  solutions 
unit.  “This  is  a  ma¬ 
jor,  major  upgrade 
for  us.” 

DB2  Version  8, 
which  was  an¬ 
nounced  two 
months  ago  without  pricing 
details,  includes  new  self-man¬ 
aging  tools,  a  redesigned  user 
interface,  a  built-in  configura¬ 
tion  adviser  and  other  en¬ 
hancements  [QuickLink  31614]. 

Despite  the  price  increases, 
an  IBM  spokeswoman  said 
DB2  will  still  cost  users  less 
than  the  $40,000  per  CPU  that 
rival  Oracle  Corp.  charges  for 


the  enterprise  version  of  its 
Oracle9i  database. 

But  Jacqueline  Woods,  vice 
president  of  global  pricing  and 
licensing  strategy  at  Oracle, 
said  via  e-mail  that  DB2  still 
falls  short  of  Oracle9i  on  func¬ 
tionality.  “As  such,  no  one 
should  expect  the  price  to  be 
the  same,”  she  said. 

Oracle  last  week 
reported  that  data¬ 
base  revenue  fell 
9%  year  to  year  in 
its  first  quarter 
ended  Aug.  31.  But 
IBM  claimed  that  it 
has  had  21  consecutive  quarters 
of  database  revenue  growth  as 
of  this  year’s  second  quarter. 

David  Beulke,  president¬ 
elect  of  the  Chicago-based  In¬ 
ternational  DB2  Users  Group, 
said  he  doesn’t  mind  the  price 
increase,  given  the  new  fea¬ 
tures  IBM  is  promising.  “The 
total  cost  of  ownership  for  DB2 
continues  to  be  cheaper  than 


competing  platforms,”  said 
Beulke,  a  consultant  and  devel¬ 
oper  at  Pragmatic  Solutions 
Inc.  in  Alexandria,  Va. 

“I  expect  they  need  to  pay 
for  development,  and  the  fea¬ 
tures  are  worth  it,”  said  Martin 
Hubei,  a  database  consultant  in 
Toronto  who  uses  DB2  Version 
7.2  to  run  a  Web  site  and  plans 
to  upgrade  to  Version  8  as  soon 
as  the  software  is  available. 

But  Mike  Schiff,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.,  said  some  users  may 
choke  on  any  price  increase  in 
the  current  IT  spending  envi¬ 
ronment.  “I  can  see  Larry  Elli¬ 
son  having  a  field  day,”  Schiff 
said,  referring  to  Oracle’s  CEO. 
Nevertheless,  he  added  that 
price  often  “is  a  relatively 
small  consideration”  in  data¬ 
base  purchases.  > 


James  Niccolai  of  the  IDG 
News  Service  contributed  to 
this  report. 


ORACLE  Q1  SLIDE 

The  software  vendor  reports 
another  year-to-year  drop-off 
in  revenue  and  profits: 
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J.O.  Edwards,  IBM 
Ink  Integration  Deal 

Denver-based  J.D.  Edwards  &  Co. 
said  it  plans  to  integrate  IBM’s  DB2 
database,  WebSphere  Application 
Server  and  other  middleware  prod¬ 
ucts  into  its  business  applications. 
The  integration  work  is  due  to  be 
completed  by  year’s  end.  J.D.  Ed¬ 
wards  said  the  price  of  its  applica¬ 
tions  will  increase,  but  it  added  that 
users  will  get  more  functionality  and 
should  be  able  to  reduce  their  soft¬ 
ware  integration  costs. 


Cisco  Ends  Reseller 
Agreement  With  Dell 


Cisco  Systems  Inc.  confirmed  that  it 
plans  to  drop  Dell  Computer  Corp. 
as  a  reseller  of  its  networking  prod¬ 
ucts  as  of  Friday.  Cisco  declined  to 
comment  on  its  reasons,  but  Dell  is 
now  selling  its  own  line  of  network 
switches  that  compete  with  prod¬ 
ucts  such  as  Cisco’s.  Dell  said  it  will 
be  able  to  continue  supplying  Cisco 
gear  until  Oct.  31  to  users  that  are 
deemed  critical. 


Flaws  Discovered  in 
Microsoft's  Java  Code 


Microsoft  Corp.  warned  of  three 
software  flaws  in  its  virtual  machine 
code  for  running  Java  applications 
on  Windows-based  PCs.  The  most 
serious  flaw  could  be  used  by  at¬ 
tackers  to  gain  complete  control  of 
vulnerable  systems,  said  Microsoft, 
which  gave  the  problem  its  maxi¬ 
mum  severity  rating.  The  company 
urged  users  to  install  a  patch  de¬ 
signed  to  plug  the  holes. 
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Short  Takes 

WORLDCOM  INC.  said  it  will  cut 
about  2,000  of  the  8,300  workers 
at  its  European  unit  and  limit  new 
network  infrastructure  investments 
in  the  region. ...  SUN  MICROSYS¬ 
TEMS  INC.  said  it  plans  to  buy  Pirus 
Networks  Inc.,  an  Acton,  Mass.- 
based  developer  of  storage  net¬ 
working  software. 


MARK  HALL  ■  ON  THE  MARK 

Vendors  Target  IT 
Job  Elimination . . . 

. . .  with  a  slew  of  new  systems  management  products  that,  in  one 
way  or  another,  automate  many  formerly  employee-dependent  admin¬ 
istrative  tasks.  As  Rick  Lane,  COO  at  Heroix  Corp.  in  Newton,  Mass., 
observes,  “In  tough  times  like  these,  you  can’t  hire  IT  talent;  in  good 
times,  people  are  too  expensive.”  So  the  company  thinks  now  is  the 
right  time  to  ship  eQ  1.5,  the  latest  upgrade  to  its  systems  management 
software.  Those  who  get  to  keep  their  jobs,  however,  will  be  treated 
to  18  new  agents  to  monitor  Microsoft  Corp.’s  Active  Directory  in  this 


week’s  software  release.  Lane  is  betting 
AD  does  better  in  the  market  on  .Net 
servers  than  it  has  so  far  on  Windows 
2000,  what  with  its  dubious  security  and 
replication  reputation.  But  just  in  case,  eQ, 
1.5  will  also  enhance  its  man¬ 
agement  of  NetWare  and 
WebLogic,  and  even  Open- 
VMS,  which  astoundingly 
enough  is  still  a  growth  mar¬ 
ket  for  Heroix,  according  to 
Lane.  ■  Help  desk  careers  will 
become  a  little  less  secure  as 
well,  with  this  week’s  release 
of  AppSight  Web  Support  4.0, 
a  $25,000  add-on  module  to 
Raleigh,  N.C.-based  Identify 
Software  Ltd.’s  management 
suite.  The  new  product, 
which,  fortunately  for  users, 
the  company  has  given  the 
same  numbering  sequence 
as  the  suite,  handles  remote 
users’  problems  with  any 


application  on  their  desktop  systems. 
Users  with  troubles  simply  log  onto  a 
Web  page  and  click  a  few  buttons,  and  a 
diagnostic  “black  box”  follows  the  user 
through  the  problem  and  automatically 
reports  back  to  the  appropri¬ 
ate  level  of  support.  Notice: 
No  tech  support  necessary.  ■ 
Unemployed  IT  pros  can  take 
some  satisfaction  that  man¬ 
aged  service  providers  (MSP)  are 
in  retreat.  According  to  Mary 
Nugent,  a  VP  and  general 
manager  in  BMC  Software 
Inc.’s  subscription  server 
business  unit,  “The  MSP  As¬ 
sociation’s  ranks  have  dwin¬ 
dled.”  What’s  more,  she  says, 
“I  think  there’s  less  than  10 
that  will  survive.”  Why?  Two 
things,  Nugent  says.  MSPs 
catered  to  the  dot-com  silli¬ 
ness,  which  sealed  many  of 
their  ill  fortunes.  Second,  the 


survivors’  fallback  was  serving  small  and 
medium-size  businesses  (SMB).  Wrong 
move,  Nugent  says.  SMBs  have  little  expe¬ 
rience  with  outsourcers,  and  that’s  not 
changing.  Large  organizations,  though, 
“get  it”  and  are  embracing  selective 
MSPs.  BMC’s  own  MSP  offering,  Guard¬ 
ian  Angel,  is  also  being  licensed  to  users 
as  part  of  the  vendor’s  famous  Patrol  line 
of  management  products,  giving  compa¬ 
nies  an  opportunity  to  eliminate  jobs 
through  the  subscription  or  licensing  ap¬ 
proach.  ■  One  area  of  automation  that  is 
possible  but  so  far  is  being  only  partly  ac¬ 
complished  is  server  change  management, 
says  Kia  Behnia,  chief  technology  officer 
at  Marimba  Inc.  in  Mountain  View,  Calif. 
“Customers  don’t  feel  comfortable  with  a 
fully  automated  mechanism,”  he  says.  In¬ 
stead,  they  upgrade  a  staging  or  test  serv¬ 
er  first  to  ensure  that  operating  system 
patches,  for  example,  won’t  cause  appli¬ 
cations  to  stumble.  Users  of  Marimba’s 
Server  Change  Management  offering, 
now  in  its  2.1  release,  will  get  Citrix  sup¬ 
port  in  the  next  iteration.  Behnia  also 
says  the  next  release  will  include  integra¬ 
tion  with  systems  management  tools 
from  Mercury  Interactive  Corp.  and 
BMC.  Another  nifty  plus  will  be  the  abili¬ 
ty  to  roll  back  changes  of  any  server  ap¬ 
plication  to  its  prior  state,  just  in  case  a 
problem  crops  up.  Of  course,  since 
everyone  is  using  staging  servers,  that 
may  not  be  a  big  deal.  When  will  users 
be  ready  to  fully  automate  change  man¬ 
agement?  Not  for  two  to  five  years, 
Behnia  predicts.  I 


■  In  last  week’s  On  the  Mark  column,  a 
senior  product  manager  at  Rational  Soft¬ 
ware  Corp.  was  misidentified.  The  cor¬ 
rect  name  is  Jeffrey  Hammond. 
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AirZWeb  Readies  Upgrades 
To  Wireless  Applications 


Software  links  users 
to  corporate  data 

BY  MATT  HAMBLEN 

Air2Web  Inc.  today  is  due  to 
announce  an  upgrade  of  its 
mobile  Internet  middleware 
that’s  designed  to  let  end  users 
access  corporate  data  via  wire¬ 
less  connections  and  a  variety 
of  handheld  devices. 

Client  applications  are  sup¬ 
ported  for  handhelds  that  run 


operating  systems  from  Palm 
Inc.  and  Research  In  Motion 
Ltd.,  as  well  as  Sun  Microsys¬ 
tems  Inc.’s  Java  2  Micro  Edi¬ 
tion,  Air2Web  said.  Support  for 
devices  based  on  Microsoft 
Corp.’s  Pocket  PC  operating 
system  is  also  coming,  but  At¬ 
lanta-based  Air2Web  wouldn’t 
say  when  it  will  be  available. 

The  middleware  release  lets 
handheld  users  pull  data  from 
corporate  servers  and  then 
do  their  work  regardless  of 
whether  they’re  connected  to  a 


network.  For  example,  Air2Web 
said,  a  utility  worker  could 
download  a  trouble  ticket  and 
then  disconnect  from  the  net¬ 
work  to  fill  out  the  form. 

Roberta  Wiggins,  an  analyst 
at  The  Yankee  Group  in 
Boston,  said  Air2Web’s  biggest 
competitors  in  mobile  data 
synchronization  are  Synchro¬ 
logic  Inc.  in  Alpharetta,  Ga., 
and  Pumatech  Inc.  in  San  Jose. 
But  Air2Web’s  new  software 
appears  to  provide  a  more  effi¬ 
cient  way  to  download  data 
than  most  rival  products, 
she  added. 

Air2Web  also  plans  to  unveil 
an  upgrade  of  its  2Mail  wire¬ 
less  e-mail  and  alert  service, 
with  new  content  encryption, 
validation  and  signature  capa¬ 


bilities  that  are  aimed  at  en¬ 
hancing  the  security  of  mes¬ 
sages  sent  to  handheld  devices. 

One  of  the  pilot  users  of  the 
new  service  is  Vigilar  Inc.,  an 
Atlanta-based  IT  security  con¬ 
sulting  firm  that’s  sending 
e-mail  messages  to  20  consul¬ 
tants  on  Short  Message  Service 
phones  from  Schaumburg,  Ill- 
based  Motorola  Inc.  “The  con¬ 
sultants  are  always  in  the  field, 
so  they’re  not  always  able  to 
check  e-mail,  and  this  is  a  great 
way  to  keep  in  touch,”  said  By¬ 
ron  Pezan,  a  network  engineer 
at  Vigilar. 

The  messages  are  priori¬ 
tized  for  distribution  from  an 
e-mail  server  and  can  each  in¬ 
clude  up  to  160  characters, 
Pezan  said.  I 


RELIABLE* 
ALTERNATIVE  TO 
DATABASES  THAT 
DON’T  SCALE. 


For  your  next  generation  of  applications, 
move  to  the  next  generation  of  database 
technology.  Cache  is  the  post-relational 
database  that  combines  high-performance 
SQL  for  faster  queries  and  an  advanced 
object  database  for  rapidly  storing  and 
accessing  objects. 

With  Cache’s  multidimensional  engine, 
your  future  applications  will  be  massively 
scalable  and  lightning  fast  -  and  they  won’t 
require  frequent  database  administration  or 
hardware  and  middleware  upgrades.  You’ll  get 
higher  performance,  at  lower  cost. 

Plus,  Cache  comes  with  a  powerful  Web 
application  development  environment  that  will 
dramatically  cut  the  time  required  to  build 
and  modify  your  applications. 

The  reliability  of  Cache  has  been  proven 
in  “life-or-death”  applications  at  the  world’s 
largest  hospitals.  With  high  reliability,  high 
performance  and  low  cost-of-ownership, 
you’ll  be  happier  with  Cache. 


With  its  multidimensional  engine  proven 
to  scale  to  tens  of  thousands  of  users, 
SQL  server  users  will  be  happier  with  Cache. 


We  are  InterSystems  -  a  specialist  in  data 
management  for  24  years,  providing  24x7 
support  to  4  million  users  in  88  countries. 

Cache  is  available  for  Windows,  OpenVMS, 
Linux  and  major  Unix  systems. 


InterSystems 

£  CACHE 

Make  Applications  Faster 

*So  Reliable,  It’s  The  World’s 
Leading  Database  In  Healthcare 

Download  a  fully-functional  version  of  Cache  or  request  it  on  CD  for  free  at  www.lnterSystems.com/reliable 

©  2002  InterSystems  Corporation.  All  nghls  reserved.  InterSystems  Cache  is  a  registered  trademark  of  InterSystems  Corporation.  Other  product  names  are  trademarks  of  their  respective  vendors.  Rel3-AII2 
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EDS  Renews  P&G 
Outsourcing  Talks 


Rival  drops  out; 
deal  could  be  close 


BY  TODD  R.  WEISS 
AND  JUAN  CARLOS  PEREZ 

wo  months  after 
ending  talks  with 
Procter  &  Gamble 
Co.  (P&G)  on  a  big 
IT  and  business 
operations  outsourcing  con¬ 
tract,  Electronic  Data  Systems 
Corp.  is  pursuing  the  deal 
again.  And  now  its  chief  rival 
has  given  up  the  chase. 

Dallas-based  Affiliated  Com¬ 
puter  Services  Inc.  (ACS)  took 
itself  out  of  the  running  for  the 
contract  last  week,  saying  that 
“the  financial,  operational  and 
cultural  risks  were  too  high.” 
ACS  appeared  to  be  the  only 
contender  left  when  EDS  with¬ 
drew  in  July  [QuickLink  31161], 
But  in  an  unusual  flip-flop, 
Plano,  Texas-based  EDS  re¬ 
newed  its  discussions  with 
P&G  earlier  this  month,  ac- 


MORE  ON  OUTSOURCING 

For  full  coverage  of  IT  outsourcing,  go  to 
our  IT  Management  Knowledge  Center: 

QuickLink  a2290 
www.computerworld.com 


EDS  said  its  third-quarter  earnings 
won’t  come  close  to  matching  earli¬ 
er  projections,  because  of  a  short¬ 
fall  in  new  business  and  lower-than- 
expected  revenue  from  existing 
contracts  with  corporate  users. 

The  company  said  net  income 
for  the  quarter  is  now  expected  to 
be  $58  million  to  $74  million,  in¬ 
stead  of  the  $364  million  target  it 
had  set  previously.  Third-quarter 
revenue  will  iikely  come  in  at  $5.3 
billion  to  $5.5  billion,  down  from 
its  original  prediction  of  up  to  $5.9 
billion. 

This  will  be  the  second  straight 
quarter  that  EDS  has  failed  to  meet 
its  expectations,  and  the  outsourc- 


cording  to  a  spokesman  for  the 
Cincinnati-based  maker  of 
consumer  products. 

The  P&G  spokesman  said 
the  new  round  of  talks  with 
EDS  began  before  ACS  an¬ 
nounced  its  decision  to  pass 
on  the  deal.  “There  were  just  a 
number  of  differences  in  op¬ 
erations  and  other  things 
where  we  could  not  reach 
agreement,”  the  spokesman 
said  of  P&G’s  negotiations 
with  ACS. 

EDS  spokesman  John  Clen- 
dening  confirmed  that  the  out¬ 
sourcing  vendor  and  P&G  are 
again  trying  to  work  out  an 
agreement.  Both  Clendening 
and  the  P&G  spokesman  said 
the  companies  could  be  just 
days  away  from  signing  a  deal. 

P&G  is  looking  to  outsource 
its  back-office  operations  and 
the  IT  systems  that  support 
them  in  a  deal  that  could  affect 
up  to  5,700  workers.  The  deal 
would  involve  a  sale  of  the 
back-office  operations  to  the 
outsourcing  vendor,  and  EDS 
initially  balked  at  the  purchase 
price  P&G  was  seeking. 

Lesley  Pool,  chief  marketing 
officer  at  ACS,  said  it’s  “unlike¬ 
ly”  that  the  company  will 
change  its  mind  about  giving 


ing  vendor  said  it  expects  the  diffi¬ 
culties  to  continue  for  the  remainder 
of  this  year  and  into  2003.  EDS  re¬ 
duced  its  fourth-quarter  revenue 
and  profit  projections  as  well. 

“These  are  not  the  results  you’ve 
come  to  expect  from  EDS;  it’s  not 
the  type  of  news  we’re  used  to  de¬ 
livering,  at  all,"  CEO  Dick  Brown 
said  during  a  conference  call.  “We 
were  more  optimistic  than  we 
should  have  been  relative  to  our 
ability  to  fight  our  way  through  a 
tough  economy.  We  expected  our 
clients’  discretionary  spending  to 
tighten,  not  virtually  stop." 

-Juan  Carlos  Perez, 
IDG  News  Service 


up  on  the  contract.  ACS 
planned  to  turn  P&G’s  Global 
Business  Services  operation 
into  a  business  unit  that  would 
also  seek  back-office  outsourc¬ 
ing  deals  with  other  clients, 
Pool  said.  But  ACS  decided 
that  the  unit’s  growth  potential 
was  lower  than  it  had  original¬ 
ly  estimated,  she  added. 

According  to  Pool,  ACS  ex¬ 
amined  P&G’s  financial  prac¬ 
tices,  analyzed  its  IT  systems 
and  even  looked  at  how  P&G’s 
IT  workers  would  view  an  out- 


BY  TODD  R.  WEISS 

Hewlett-Packard  Co.  bulked  up 
its  outsourcing  operations  last 
week  by  signing  a  $1.5  billion 
IT  services  contract  with  the 
Canadian  Imperial  Bank  of 
Commerce  (CIBC)  and  agree¬ 
ing  to  buy  the  bank  out  of  a  4- 
year-old  joint  venture. 

For  Toronto-based  CIBC, 
the  two  deals  end  a  foray  into 
the  IT  services  business  that 
the  bank  started  on  its  own  and 
then  continued  through  the  In- 
tria-HP  joint  venture.  Intria- 
HP  manages  much  of  CIBC’s 
IT  infrastructure  and  provides 
technology  outsourcing  and 
support  services  to  eight  other 
identified  customers,  includ¬ 
ing  General  Motors  Corp. 

Under  the  agreements,  HP 
said  it  will  gain  about  1,280  IT 
workers  and  take  over  manage¬ 
ment  of  systems  at  CIBC  rang¬ 
ing  from  desktop  PCs  to  data 
center  servers. 

Michael  Woeller,  the  bank’s 
CIO,  said  the  deals  will  let 
CIBC  focus  on  its  financial  ser¬ 
vices  business  and  should  “free 
significant  capital”  that  now  is 
being  spent  on  technology. 

CIBC  awarded  the  outsourc¬ 
ing  contract  to  HP  without  is- 


Outsourcing 

Developments 

JUNE:  P&6  confirms  that  it’s 
looking  to  outsource  its  back- 
office  operations  and  systems. 

JULY:  EDS  says  it’s  dropping 
out  of  the  running. 

*  >  •  4  *  «  •  Y  ®  *  *  V  •  *  *  *  *->  .*  *  ft  *  *  «-  •  • 

SEPTEMBER:  EDS  resumes 
talks  with  P&G;  ACS  withdraws 
from  negotiations. 

sourcing  arrangement  with  the 
services  company.  “The  syner¬ 
gies  were  not  there,”  she  said. 

Analysts  have  estimated  the 
potential  value  of  the  P&G 
contract  at  anywhere  from  $4 
billion  to  $10  billion  over  10 
years.  But  the  disclosure  that 
EDS  is  back  in  the  picture  at 


suing  a  formal  request  for  pro¬ 
posals,  Woeller  said.  “Over  the 
last  four  years,  the  two  compa¬ 
nies  have  gotten  to  know  each 
other  really  well,”  he  noted. 
Woeller  also  said  that  the  sev¬ 
en-year  deal  and  HP’s  willing¬ 
ness  to  buy  CIBC’s  51%  stake  in 
Intria-HP  “to  some  degree  go 
hand  in  hand.” 

Ann  Livermore,  executive 
vice  president  of  HP’s  services 
unit,  said  the  contract  is  HP’s 
largest  outsourcing  deal.  CIBC, 
which  has  8  million  customers, 
will  also  become  HP’s  largest 
outsourcing  client. 

The  systems  that  HP  will 
manage  for  CIBC  include  a  mix 


ntria-HP  Highlights 


HISTORY:  Established  in 
1998  to  provide  IT  services 
to  Fortune  500  clients 


OWNERSHIP:  CIBC  held  a 
51%  stake;  HP  owned  49% 

EMPLOYEES:  1,280 

CLIENTS:  CIBC,  GM.  Delphi 
Automotive  Systems  LLC, 
Halliburton  Co.,  Celanese  AG, 
Identrus  LLC,  Soltrus  Inc., 
Loblaw  Companies  Ltd. 


EDS  Expects  Big  Q3  Earnings  Shortfall 


Bank  Awards  HP  $1.5B  IT  Deal, 
Exits  Services  Joint  Venture 
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P&G  came  at  a  delicate  time 
for  the  outsourcing  company, 
which  warned  last  week  that 
its  third-quarter  financial  re¬ 
sults  will  be  well  below  expec¬ 
tations  (see  story,  below  left). 

Stephen  David,  CIO  and 
chief  business-to-business  of¬ 
ficer  at  P&G,  said  this  month 
that  the  outsourcing  deal  is  ex¬ 
pected  to  include  management 
of  the  company’s  enterprise  re¬ 
source  planning  system,  which 
is  based  on  SAP  AG’s  R/3  ap¬ 
plications.  SAP  is  now  rolling 
out  its  supply  chain  planning 
software  and  will  outsource 
that  as  well,  he  said.  I 


Perez  writes  for  the  IDG  News 
Service.  Computerworld’s 
Marc  L.  Songini  contributed  to 
this  report. 


of  Unix  and  Windows  NT 
servers,  plus  IBM  AS/400s  and 
the  fault-tolerant  NonStop  Hi¬ 
malaya  machines  HP  bought  as 
part  of  its  acquisition  of  Com¬ 
paq  Computer  Corp.  in  May, 
Livermore  said. 

“To  be  a  large  services  play¬ 
er,  we  have  to  deal  with  what¬ 
ever  is  in  our  customers’  envi¬ 
ronments,”  she  said.  HP  will 
also  manage  IT  procurement 
for  CIBC  and  provide  applica¬ 
tion  support  services. 

Andrew  Efstathiou,  an  ana¬ 
lyst  at  The  Yankee  Group  in 
Boston,  said  HP  has  made 
growing  its  IT  services  rev¬ 
enue  a  top  priority.  The  com¬ 
pany’s  services  business  has 
already  expanded  in  recent 
years,  Efstathiou  said,  but  he 
added  that  it’s  still  a  far  cry 
from  the  size  of  rivals  such  as 
IBM  Global  Services  and  Elec¬ 
tronic  Data  Systems  Corp.  The 
CIBC  outsourcing  deal  “is  the 
type  of  stake  in  the  ground  that 
HP  needs,”  Efstathiou  said. 

HP  and  CIBC  didn’t  disclose 
the  terms  of  the  Intria-HP  buy¬ 
out,  which  is  scheduled  to  be 
completed  by  Nov.  1.  But  Liver¬ 
more  said  HP  will  still  make 
money  on  the  outsourcing 
contract  after  subtracting  the 
amount  it’s  paying  for  CIBC’s 
stake  in  the  joint  venture.  I 


Juan  Carlos  Perez  of  the  IDG 
News  Service  contributed  to  this 
report. 
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IT  Helps  Insurance  Firms  Deal 
With  Money-Laundering  Rule 


Conference  attendees  say  technology  will  be 
key  in  push  to  comply  with  antiterrorism  laws 


BY  LUCAS  MEARIAN 

CHICAGO 

he  insurance  in¬ 
dustry  is  being 
pushed  into  the 
uncharted  waters 
of  dealing  with  an¬ 
titerrorism  regula¬ 
tions,  leaving  many 
companies  looking 
to  their  IT  man¬ 
agers  for  help  in 
providing  a  quick  fix  to  compli¬ 
cated  compliance  issues. 

Until  now,  new  antiterror¬ 
ism  measures  such  as  the  U.S. 
Patriot  Act  have  mostly  ap¬ 
plied  to  banks  and  brokerages. 
But  as  attendees  of  last  week’s 
insurance-oriented  LOMA 
Emerging  Technology  Confer¬ 
ence  here  listened  to  speakers 
discuss  possible  new  federal 
regulations,  the  U.S.  Depart¬ 


ment  of  the  Treasury  an¬ 
nounced  a  proposed  rule  that 
would  require  insurers  to  cre¬ 
ate  programs  aimed  at  pre¬ 
venting  money  laundering. 

That  puts  the  onus  squarely 
on  IT,  according  to  Scott  Harri¬ 
son,  a  partner  at 
McLean,  Va.-based 
KPMG  Consulting 
Inc.  “You  have  got  to 
have  the  ability  to 
track  and  analyze  your  transac¬ 
tions,”  Harrison  told  attendees. 
“Compliance  requires  a  very 
heavy  reliance  on  technology.” 

Several  IT  managers  at  the 
conference  said  the  mere  like¬ 
lihood  of  new  regulations  had 
already  placed  a  heavy  burden 
on  them  to  find  technology 
that  can  screen  databases  for 
known  criminals  or  terrorists 
and  alert  corporate  compliance 


officers  to  suspicious  activities 
by  customers. 

“A  lot  will  depend  on  how 
the  legal  department  interprets 
the  new  regulations,”  said  Joe 
Shea,  an  IT  manager  in  the  as¬ 
set  development  division  at 
Allmerica  Financial  Corp.  in 
Worcester,  Mass.  “It’s  not  only 
an  IT  challenge,  but  a  work- 
flow  challenge.” 

The  Patriot  Act  already  re¬ 
quires  financial  services  firms 
to  verify  customer  identities, 
submit  suspicious  activity  re¬ 
ports  to  the  Treasury  Depart¬ 
ment’s  Financial  Crimes  En¬ 
forcement  Network  (FinCEN) 
and  check  customers  against 
crime  databases  established  by 
law  enforcement  agencies.  But 
FinCEN  had  deferred  applying 
anti-money-laundering  require¬ 
ments  to  insurers  in  order  to 
give  federal  regulatory  officials 
more  time  to  study  the  industry. 

According  to  the  rule  now 
being  proposed,  at  a  minimum 
insurance  companies  would 


have  to  develop  internal  pro¬ 
cedures  and  controls  to  root 
out  money-laundering  activi¬ 
ties  and  make  a  series  of  IT  in¬ 
vestments  (see  box). 

FinCEN  narrowed  the  pro¬ 
posed  requirements  to  life  in¬ 
surance  and  annuity  products 
because  they  “allow  a  customer 
to  place  large  amounts  of  funds 
into  the  financial  system  and 
seamlessly  transfer  such  funds 
to  disguise  their  true  origin,” 
according  to  the  proposed  rule. 

In  addition,  life  insurance 
policies  can  be  cashed  in  for 
redeemable  amounts,  which 
make  them  “particularly  invit¬ 
ing  money-laundering  vehi¬ 
cles,”  FinCEN  said. 

For  life  insurers,  though,  the 
rule  could  mean  big  changes. 
“We’re  going  to  spend  a  lot  of 
time  and  money  on  monitoring 
that  we  didn’t  do  in  the  past,” 
said  Shawn  Bryan,  vice  presi¬ 
dent  of  e-business  develop¬ 
ment  at  National  Life  Insur¬ 
ance  Co.  in  Montpelier,  Vt. 
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What’s  in  Store 

Regulators  will  likely  re¬ 
quire  insurers  to  take  the 
following  IT-related  steps: 

■  Development  of  systems 
that  can  help  provide  money- 
laundering  controls 

*  Use  of  more  sophisticated 
database  surveillance  tools  to 
identify  suspicious  activity 

m  Checking  customer  databases 
and  transactions  against  the  list 
of  restricted  countries  established 
by  the  Federal  Office  of  Foreign 
Assets  Control 

■  Use  of  an  IP-based  viitual 
private  network  connection  to 
send  reports  to  the  Treasury 
Department 

Bryan  said  National  Life  in¬ 
stalled  new  software  this  year 
to  automate  the  process  of 
checking  customers.  “I’m  sure 
everybody’s  already  got  it  or  is 
working  on  it”  he  added.  I 


WIRELESS  FUTURE 

Some  insurers  are  eyeing  wireless  tech¬ 
nology  but  haven’t  fully  embraced  it  yet: 

QuickLink  33086 
wmv.computerworld.com 


COMPLIANCE 

ISSUES 


U.S.  Faces  Nanotechnology  R&D  ‘Dogfight’ 


Europe,  Asia  are 
matching  U.S.  funds 

BY  PATRICK  THIBODEAU 

WASHINGTON 

Countries  in  Europe  and  Asia 
are  keeping  pace  with  U.S. 
spending  on  basic  research  in 
nanotechnology,  according  to 
experts  in  that  area.  Conse¬ 
quently,  U.S.  investment  in  the 
technology,  which  manipulates 
matter  atom  by  atom  and  is 
expected  to  spur  a  computing 
revolution,  is  only  about  25% 
of  the  world’s  total. 

“It’s  a  dogfight  —  the  rest 
of  the  world  simply  is  not  go¬ 
ing  to  allow  us  to  outspend 
them,”  said  Stanley  Williams,  a 
fellow  and  director  of  quantum 
science  research  at  Hewlett- 
Packard  Co.,  in  an  interview 


last  week.  “We  are  going  to 
have  to  be  qualitatively  better 
because  we  are  not  going  to  be 
quantitatively  larger.” 

As  foreign  spending  increas¬ 
es,  nanotechnology  companies 
in  the  U.S.  are  struggling  to  find 
funding. 

For  instance,  Charles  Janac, 
president  and  CEO  of  Nanomix 
Inc.,  made  presentations  to  41 
venture  capital  firms  and  at¬ 
tended  an  exhausting  145  meet¬ 
ings  over  nine  months  before 
receiving  $9  million  in  funding 
earlier  this  month  for  his  nano¬ 
technology  electronic  compo¬ 
nent  and  sensor  product  com¬ 
pany  in  Emeryville  Calif. 

He’s  lucky.  Many  other  firms 
probably  won’t  get  funding.  “I 
fear  for  them,”  said  Janac. 

The  government  could  stim¬ 
ulate  nanotechnology  develop¬ 
ment  by  spending  more  on  re¬ 


search  to  fuel  product  develop¬ 
ment,  said  researchers  and  pri¬ 
vate  nanotechnology  experts. 

The  race  among  nations  to 
be  leaders  in  this  technology 
prompted  Sen.  Ron  Wyden 
(D-Ore.)  to  introduce  a  bill  last 


week  to  create  national  nano¬ 
technology  research  centers 
and  coordinate  federal  spend¬ 
ing.  Wyden  is  chairman  of  the 
Senate’s  Science,  Technology 
and  Space  Subcommittee. 

Separately,  the  Bush  admin¬ 
istration  is  seeking  $679  mil¬ 
lion  for  basic  nanotechnology 
research  for  the  fiscal  year 
beginning  Oct.  1  —  a  17%  in¬ 


crease  over  this  year. 

Business  investment  in  nano¬ 
technology  start-ups  is  also  on 
the  rise.  Investment  in  these 
companies  stood  at  $100  mil¬ 
lion  in  1999  and  is  projected  to 
reach  $1  billion  by  next  year, 
according  to  Mark  Modze- 
lewski,  executive  director  of 
the  New  York-based  Nano- 
Business  Alliance,  who  testi¬ 
fied  last  week  at  a  Senate  hear¬ 
ing  on  nanotechnology. 

But  despite  these  potential 
gains  in  funding,  experts  say 
more  research  and  develop¬ 
ment  funds  are  needed,  along 
with  reforms  in  how  universi¬ 
ties  use  research  funds. 

Williams  said  major  compa¬ 
nies  have  helped  fund  nano¬ 
technology  research  at  univer¬ 
sities  only  to  find  researchers 
using  their  findings  to  form 
start-up  firms. 

“Large  companies  have  been 
burned  many,  many  times  by 
giving  money  for  research  to 
universities,”  he  said,  i 


Nano  Revolution 

Nanotechnology  is  expected  to  ultimately  make  it  possible  to  build  com¬ 
puters  in  which  molecules  serve  as  diodes,  wires  and  transistors  - 

all  linked  chemically.  From  these  CPUs,  tiny  computing  devices  would  emerge 
that  use  very  little  power  and  yet  are  millions  or  billions  of  times  more  powerful 
than  today’s  Pentium  chips. 

DEVELOPMENTS 

■  Just  this  month,  HP  said  it  has  created  the  highest-density  electroni¬ 
cally  addressable  memory  on  record:  a  64-bit  memory  using  molecular 
switches  that  are  less  than  one  square  micron  in  size,  a  bit  density  10  times 
greater  than  a  silicon  chip. 

■  In  June,  IBM  said  it  had  produced  a  nano-scale  storage  system  capa¬ 
ble  of  a  data  storage  density  of  1  trillion  bits  per  square  inch  -  20  times  higher 
than  the  densest  magnetic  storage  available  today. 


(©server 


Winning  with  UNIX!  The  new  IBM  (©server  pSeries™  630.  Affordable,  yet  loaded  with  key  mainframe¬ 
like  reliability  features.  Like  Chipkill™  memory,  which  detects  and  corrects  memory  errors  -  making 
downtime  due  to  memory  failure  about  100  times  less  likely.1  So  your  apps  keep  running.  For  an  IDG 
report  on  technology’s  role  in  advancing  your  business,  or  for  more  info,  go  to  ibm.com/eserver/p630. 
Reliability  and  affordability.  As  simple  as  one,  two,  three. 


(C^/x^'/hfss  is  ~fht  ?b 


'See  IBM  study  by  Timothy  J.  Dell,  "A  White  Paper  on  the  Benefits  of  Chipkill-Correct  ECC  for  PC  Server  Main  Memory,"  dated  November  25, 1997  available  at  the  following:  http://www.ibm.com/servers/eserver/pseries/ 
campaigns/chipkill.pdf.  IBM,  the  e-business  logo,  Chipkill,  pSeries  and  e-business  is  the  game.  Play  to  win  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States 
andfor  other  countries.  UNIX  is  a  registered  trademark  of  The  Open  Group.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©2002  IBM  Corporation.  All  rights  reserved. 
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BRIEFS 


Cisco  Rolls  Out  Three 
Midrange  Switches 

Cisco  Systems  Inc.  introduced  a 
line  of  three  midrange  switches 
that  support  up  to  240  Ethernet 
ports  and  include  built-in  redundant 
power  supplies.  The  Catalyst  4500 
series  switches  use  the  same  line 
cards  and  supervisor  engines  as  the 
2-year-old  Catalyst  4000  models, 
Cisco  said.  Prices  start  at  $14,475 
for  the  new  switches. 

EMC  Adds  Storage 
Management  Tools 

EMC  Corp.  expanded  its  line  of  multi¬ 
vendor  storage  management  soft¬ 
ware,  adding  an  application  that 
automates  the  process  of  installing 
and  reallocating  resources  on 
storage-area  networks.  Hopkinton, 
Mass.-based  EMC  also  upgraded 
several  management  tools  and 
launched  a  hosted  application  per¬ 
formance  monitoring  service. 


DynCorp/IBM  Team 
Wins  IT  Deal  at  EPA 

A  team  of  vendors  led  by  Reston, 

Va. -based  DynCorp  was  awarded 
a  seven-year  deal,  potentially  worth 
more  than  $850  million,  to  manage 
IT  systems  for  the  U.S.  Environmen¬ 
tal  Protection  Agency.  The  team 
includes  IBM,  which  said  it  will  run 
the  EPA’s  data  center  systems, 
e-maii  services  and  Web  sites  un¬ 
der  a  subcontract  valued  at  up  to 
$230  million. 


Short  Takes 

Cambridge,  Mass.-based  INTER¬ 
SYSTEMS  CORP.  today  plans  to 
announce  an  upgrade  of  its  Cache 
multidimensional  database  with 
built-in  transaction  data  analysis 

capabilities _ Santa  Clara,  Calif.- 

based  NETWORK  ASSOCIATES  INC. 
and  Cupertino,  Calif.-based  TREND 
MICRO  INC.  both  said  they  won 
contracts  to  supply  antivirus  soft¬ 
ware  to  the  U.S.  Defense  Informa¬ 
tion  Systems  Agency. 


NEWS 

Savvy  CIOs  Go  Beyond  ROI 
Metrics  in  IT  Budget  Process 


More  IT  execs  are  using  sophistica  ted 
calculations  to  figure  shareholder  value 


BY  THOMAS  HOFFMAN 

HILE  MANY 

IT  man¬ 
agers  are 
satisfied 
with  simply 
determining  the  cost  reduc¬ 
tions  or  payback  generated  by 
an  IT  investment,  a  small  but 
growing  number  of  IT  leaders 
are  setting  their  sights 
beyond  traditional 
ROI  metrics.  Their 
goal:  to  demonstrate 
the  shareholder  value  and  com¬ 
plete  financial  impact  of  an 
IT  project. 

As  many  corporate  IT  exec¬ 
utives  struggle  to  nail  down 
their  fiscal  2003  spending  lev¬ 
els  this  budget  season,  some 
savvy  CIOs  are  making  use 
of  sophisticated  financial  mod¬ 
eling  techniques.  Those  tech¬ 
niques,  such  as  net  present  val¬ 
ue  and  internal  rate  of  return 
(IRR),  generate  more  telling 
and  accurate  estimates  of  the 
full  financial  impact  that  IT 
investments  might  yield,  these 
CIOs  say. 

Calculations  such  as  IRR 
help  IT  managers  pinpoint 
“what  aspects  of  the  IT  system 
are  delivering  value,”  such  as 
improved  cash  flows  or  in¬ 
creased  sales,  said  Chris  Gard¬ 
ner,  co-founder  of  iValue,  a 
Chicago-based  consulting  firm 
that  helps  its  customers  cost- 
justify  their  IT  investments. 

IRR  Proponents 

That’s  one  of  the  reasons 
why  Gaylord  Entertainment 
Center  CIO  Kent  Fourman  has 
become  an  advocate  of  IRR  and 
discounted  cash  flow  calcula¬ 
tions.  Last  year,  the  Nashville- 
based  hospitality  and  entertain¬ 
ment  company,  whose  interests 
include  the  Grand  Ole  Opry, 
brought  in  a  new  management 
team  that  “sponsored”  this 


approach  for  all  facets  of 
the  company,  including  the  IT 
organization. 

Since  then,  Fourman  has  ap¬ 
plied  IRR  calculations  to  sev¬ 
eral  IT/business  projects,  in¬ 
cluding  a  revenue-generating 
opportunity  for  his  company 
that  he’s  reluctant  to  elaborate 
on  for  competitive  reasons.  A 
detailed  IRR  analysis 
of  the  plan  “came 
in  with  a  very  posi¬ 
tive  IRR  that  greatly 
exceeded  the  cost  of  capital, 
even  though  it  is  a  very  expen¬ 
sive,  multimillion-doilar  proj¬ 
ect,”  he  said.  Those  findings 
were  enough  to  persuade  se¬ 
nior  management  to  approve  a 
proof-of-concept  trial  later  this 
year  that  could  lead  to  project 


Financial-ese 

Here  are  definitions  for  three  finan¬ 
cial  calculations  that  can  be  used  to 
determine  the  full  financial  impact 
of  an  IT  project: 

Internal  rate  of  return  (IRR) 

WHAT  IT  IS:  IRR  expresses  the  dol¬ 
lar  return  expected  from  a  project 
as  an  interest  rate.  Once  the  rate 
is  established,  you  can  compare  it 
with  rates  you  would  earn  by  invest¬ 
ing  in  other  projects.  It's  informally 
known  as  the  “hurdle”  rate,  since 
it’s  usually  the  lowest  rate  of  return 
that  management  will  accept. 

WHY  YOU  NEED  TO  KNOW  IT:  It's 
a  common  financial  metric  used  by 
senior  management  that  calculates 
the  time  value  of  money.  Typically,  a 
project  must  earn  an  IRR  that’s  sev¬ 
eral  percentage  points  higher  than 
the  cost  of  borrowing  -  that  com¬ 
pensates  the  company  for  its  risk 
exposure  and  time. 

Net  present  value  (NPV) 

WHAT  IT  IS:  NPV  refers  to  the  fu- 


funding  for  next  year. 

The  IT  organization  at 
Valassis  Communications  Inc., 
a  Livonia,  Mich.-based  market¬ 
ing  services  firm,  switched  to 
an  IRR  model  in  June  after  an 
ROI  assessment  for  an  e-pro- 
curement  system  was  unable 
to  provide  an  accurate  analysis 
of  the  project’s  financial  im¬ 
pact  on  the  company,  said  Amy 
Courter,  vice  president  of  IT. 
“ROI  works  well  when  you’re 
[looking  at]  revenue  genera¬ 
tion  or  cost  savings,”  she  said. 
“But  what  about  when  it  spans 
both?  That’s  why  we  thought 
[IRR]  could  help  us.” 

The  IRR  analysis  helped 
Courter  and  her  team  deter¬ 
mine  that  the  e-procurement 
system  could  help  Vlassis  save 
more  than  $100,000  per  year  in 
volume  discounts  on  its  pur¬ 
chases.  The  calculations  also  re¬ 
vealed  that  the  company  could 
pass  on  some  of  the  cost  sav- 


ture  net  cash  flow  that  a  project  is 
expected  to  deliver,  minus  the  in¬ 
vestment.  It  defines  the  value  of 
a  project  in  “todays  dollars.” 

WHY  YOU  NEED  TO  KNOW  IT: 

NPV  can  help  your  IT  department 
win  internal  investment  dollars  by 
showing  the  finance  department 
that  investing  in  an  e-learning  sys¬ 
tem,  for  example,  will  yield  a  high  re¬ 
turn  in  terms  of  reduced  travel  costs, 
highly  focused  training  and  more. 

Discounted  cash  flow  (DCF) 
WHAT  IT  IS:  DCF  is  a  way  to  calcu¬ 
late  the  value  of  a  high-priced  item 
over  time.  In  a  server  leasing  agree¬ 
ment,  for  example,  it’s  calculated  by 
adding  the  initial  cash  down  pay¬ 
ment  to  the  monthly  leasing  pay¬ 
ments,  then  subtracting  that  sum 
from  what  it  would  have  cost  to  pur¬ 
chase  the  servers  at  the  outset. 
WHY  YOU  NEED  TO  KNOW  IT: 
Negotiating  upfront  what  the  resid¬ 
ual  value  of  equipment  will  be  at  the 
end  of  a  lease  enables  an  IT  manag¬ 
er  to  use  that  value  -  rather  than  the 
higher  market  value  -  to  renegotiate 
the  lease  for  subsequent  terms. 


mgs  from  the  system  to  its  cus¬ 
tomers  and  generate  $250,000 
per  year  in  incremental  rev¬ 
enue,  said  Courter.  All  told,  the 
IRR  for  the  e-procurement  sys¬ 
tem  “is  around  20%,  and  the 
payback  is  expected  in  just 
about  two  years,”  she  said. 

Limitations 

Fourman  and  Courter  both 
acknowledge  that  it’s  nearly 
impossible  to  apply  IRR  to  in¬ 
frastructure  or  equipment  up¬ 
grade  investments,  such  as  ex¬ 
panding  a  server  farm.  Accord¬ 
ingly,  not  all  IT  executives 
see  a  need  to  use  sophisticat¬ 
ed  calculations  to  cost-justify 
IT  investments  within  their  or¬ 
ganizations.  “We  take  a  very 
traditional  yet  pragmatic  and 
practical  approach  toward  un¬ 
derstanding  the  value  that  IT 
projects  deliver  to  our  organi¬ 
zation,  some  of  which  is  quan¬ 
tifiable,  most  of  which  is  very 
difficult  to  quantify,”  said  Phil 
Go,  CIO  at  Barton  Malow  Co., 
a  Southfield,  Mich.-based  con¬ 
struction  management  firm. 

Not  every  project  needs 
to  be  quantified,  say  some  IT 
executives. 

“Visionary  retail  companies 
are  thinking  in  ways  that  aren’t 
necessarily  justifiable  on  pa¬ 
per,  but  they  know  in  their  guts 
it’s  the  way  to  move,”  said 
Cathy  Hotka,  vice  president  of 
IT  at  the  National  Retail  Feder¬ 
ation  in  Washington.  That  type 
of  approach  is  also  aided  by  the 
success  of  past  technology  in¬ 
vestments  in  the  retail  sector 
that  “have  shown  their  merit, 
and  a  lot  of  purchases  don’t 
have  to  be  cost-justified  any¬ 
more,”  she  added. 

But  for  Valassis,  “IRR  always 
made  such  great  sense,”  said 
Courter.  “Instead  of  having  a 
room  full  of  business  people 
figure  out  [the  returns  on  an  IT 
investment],  we  do  it  for  them. 
While  I  always  seek  guidance 
to  make  sure  it’s  prioritized 
correctly,  we’re  in  great  shape 
when  we  go  in  the  room.”  I 


ROIWATCH 


Then  again,  can  you  really  afford  to  gamble  with  your  corporate  data  and  brand? 

Which  prompts  the  question:  if  you  don’t  protect  your  enterprise  from  Trojan  horses  and  spyware  programs  now,  then  when  will  you? 

Fortunately,  Zone  Labs  offers  a  simple,  proven,  and  affordable  way  to  stack  the  odds  in  your  favor.  Our  security  solutions  maintain 
your  good  reputation  and  safeguard  critical  data  by  protecting  your  enterprise  network  from  hacker  attacks  that  evade  perimeter 
firewalls,  antivirus,  and  IDS.  In  fact,  Zone  Labs  Integrity™  is  the  distributed  firewall  solution  that  protects  data  and  productivity  by 
securing  vulnerable  remote  and  mobile  PCs.  So  whether  you  need  centrally  managed  security  or  a  stand-alone  solution,  Zone  Labs 
is  a  safe  bet  to  protect  your  entire  enterprise  network. 

To  see  how  your  company  measures  up,  complete  a  free  security  risk  assessment  at  www.zonelabs.com/securityROI  or  call 
us  at  1-877-876-4960.  Chances  are,  we  will  have  the  right  security  solution  for  your  needs. 


LABS 

SMARTER  SECURITY 


’  Source:  CBSNEWS.com,  Riptech  Internet  Security  Threat  Report,  2001.  ©  2002  Zone  Labs,  Inc.  All  rights  reserved.  The  Zone  Labs  logo  is  a  registered  trademark  of  Zone  Labs,  Inc.  Zone  Labs  Integrity  and  Smarter  Security  are  trademarks  of  Zone  Labs,  Inc. 
Zone  Labs  Integrity  protected  under  U.S.  Patent  No.  5,987,611.  Reg.  U.S.  Pat.  &  TM  Off.  v.080902 
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Vendors  Spar 
On  Workplace 
Net  Surfing 

Firm’s  no-monitoring 
claim  being  disputed 

BY  PATRICK  THIBODEAU 

WASHINGTON 

IT  managers  who  want  to  con¬ 
trol  workplace  Internet  use 
have  a  new  adversary,  a  San 
Diego  company  that  claims  to 
make  it  possible  for  employees 
to  surf  anonymously. 

Anonymizer  Inc.  last  month 
released  a  new  version  of  its 
product,  Private  Surfing  2.0, 
and  coupled  it  with  a  bold  mar¬ 
keting  claim:  “Surf  at  work 
without  being  monitored.” 

Indeed,  employees  are  being 
encouraged  to  pay  $29.95  annu¬ 
ally  to  circumvent  systems  put 
in  place  by  their  IT  depart¬ 
ments.  But  the  message  to  surf- 
happy  employees  ought  to  be 
“buyer  beware.” 

No  sooner  had  Anonymizer 
begun  its  marketing  campaign 
than  Orange,  Calif. -based  8e6 
Technologies  Inc.  (a  takeoff  on 
the  slang  expression  “eighty- 
six”  meaning  “to  eliminate”) 
announced  a  simple  library  up¬ 
date  to  thwart  Anonymizer. 
Another  security  and  filtering 
company,  St.  Bernard  Software 
Inc.  in  San  Diego,  said  it  didn’t 
even  have  to  make  changes  to 
thwart  Anonymizer’s  product. 

Potential  for  Mischief 

IT  managers  such  as  Harold 
Moscho,  director  of  technology 
management  for  6,000  users  at 
MultiCare  Health  System  in 
Tacoma,  Wash.,  are  nonetheless 
concerned  by  the  development. 

“I  hope  that  it  is  not  some¬ 
thing  that  is  very  widespread,” 
said  Moscho,  who’s  using  8e6’s 
filtering  technology.  He  said 
he’s  concerned  that  Anony¬ 
mizer  may  appeal  to  people 
“who  have  a  great  deal  of  de¬ 
sire  for  vengeful  or  mischie¬ 
vous”  behavior. 

Users  of  Private  Surfing  surf 
the  Internet  through  Anony- 
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BMC  Ups  Performance 
Management  Software 

Four  new  or  upgraded  tools  due  for  release 


mizer’s  network.  They  log  on 
through  their  Web  browser 
and  get  IP  addresses  and  do¬ 
main  names  that  can’t  be 
traced  back  to  them. 

The  filtering  services  are 
thwarting  employees  by  block¬ 
ing  access  to  Anonymizer.com. 
And  if  the  connection  is  en¬ 
crypted,  8e6  will  time-out  or  cut 
off  an  encrypted  link,  said  Mark 
Parker,  a  senior  engineer  at  8e6. 

Anonymizer  officials  dispute 
claims  that  its  system  can  be 
blocked  by  these  filters;  if 
blocked,  the  Anonymizer.com 
domain  can  make  available  oth¬ 
er  IP  addresses  and  domains. 

Regardless,  firm  founder  and 
president  Lance  Cotrell  down¬ 
played  the  workplace  surfing 
claim.  “We’re  not  really  push¬ 
ing  the  surfing  at  work.”  He  ac¬ 
knowledged  that  employers 
can  use  a  range  of  tools,  such  as 
keystroke  monitoring,  to  track 
employee  Internet  use.  > 


Surfing  Turf  War 

M0  RIGHT:  Employees  who  want 
to  surf  the  Web  at  work  have  no 
legal  protections,  and  there's 
nothing  to  prevent  employers  from 
monitoring  them,  say  experts. 

NO  LAWS:  Efforts  by  state  and 
federal  lawmakers  to  impose  a 
“notice”  requirement  have  failed  in 
the  face  of  business  opposition. 


BY  MATT  HAMBLEN 

MC  SOFTWARE  INC. 

today  plans  to  an¬ 
nounce  four  new  or 
upgraded  perfor¬ 
mance  management 
and  predictive  analysis  tools 
for  use  in  planning  installa¬ 
tions  and  upgrades  of  corpo¬ 
rate  IT  systems. 

The  new  products  are  part 
of  an  Enterprise  Performance 
Assurance  initiative  at  Hous¬ 
ton-based  BMC  that  combines 
a  variety  of  performance  man¬ 
agement  tools  for  distributed 
systems  and  mainframes  under 
a  single  business  unit. 

BMC  said  it  will  immediate¬ 
ly  release  Web-based  software, 
called  Patrol  Perceive,  that’s 
designed  for  use  by  business 
managers  and  other  workers 
outside  of  IT  departments. 
The  software  can  help  users 
evaluate  how  a  network  or  part 
of  a  system  will  perform  while 
running  under  certain  condi¬ 
tions  or  with  specific  applica¬ 
tions,  according  to  BMC. 

For  example,  a  corporate  ex¬ 


ecutive  without  specific  techni¬ 
cal  skills  could  gauge  how  a  net¬ 
work  would  handle  a  sudden 
influx  of  end  users  following  an 
acquisition,  a  BMC  official  said. 
Patrol  Perceive  is  being  posi¬ 
tioned  as  a  low-cost  alternative 
to  BMC’s  more  sophisticated 
assessment  tools.  Pricing  starts 
at  $20  per  Windows  user. 

Richard  Fronheiser,  a  capaci¬ 
ty  planning  specialist  at  AFLAC 
Inc.  in  Columbus,  Ga.,  said  Pa¬ 
trol  Perceive,  or  something  sim¬ 
ilar  that  could  be  developed  in- 
house,  would  be  a  valuable  add¬ 
on  tool  for  the  insurer. 

AFLAC’s  IT  department  al¬ 
ready  uses  BMC’s  higher-level 
Patrol  Performance  Assurance 
tools  for  capacity  planning  and 
performance  analysis,  Fron¬ 
heiser  said.  But  Patrol  Perceive 
could  be  used  throughout  the 
company  to  evaluate  the  per¬ 
formance  of  applications  and 
systems,  he  added. 

BMC  will  also  announce  that 
it  plans  to  roll  out  a  new  ver¬ 
sion  of  Patrol  Performance  As¬ 
surance  in  December  that  in¬ 


cludes  support  for  remote 
management  of  Windows  sys¬ 
tems,  without  the  need  to  in¬ 
stall  agents  on  the  machines. 
The  upgrade  will  also  include 
an  open  architecture  that  lets 
performance  data  be  moved  to 
other  vendors’  software. 

The  two  other  new  prod¬ 
ucts,  Mainview  Performance 
Assurance  and  Patrol  for  i$- 
eries-Predict,  are  due  for  re¬ 
lease  next  week.  The  Main- 
view  upgrade  extends  BMC’s 
predictive  analysis  capabilities 
for  IBM’s  zSeries  mainframes 
to  include  virtual  machine  par¬ 
titions  that  run  under  Linux. 
BMC  said  Patrol  for  iSeries- 
Predict  will  be  able  to  identify 
how  changes  to  IBM’s  iSeries 
and  AS/400  systems  will  affect 
their  responsiveness. 

James  Governor,  an  analyst 
at  Illuminata  Inc.  in  Nashua, 
N.H.,  said  BMC’s  announce¬ 
ments  should  help  it  meet  the 
needs  of  a  wider  range  of 
users.  IBM’s  Tivoli  Software 
management  software  unit  be¬ 
gan  a  similar  effort  last  year,  he 
said.  BMC  also  competes  in 
this  market  with  Computer  As¬ 
sociates  International  Inc.  I 


Continued  from  page  1 

Wireless  LANs 

keys  that  can  be  changed 
rapidly,  rather  than  the  static 
keys  used  in  WEP.  Not  only  are 
WEP  keys  static,  but  every 
user  working  with  a  particular 
wireless  LAN  access  point  re¬ 
ceives  the  same  key,  allowing 
hackers  using  widely  available 
key-cracking  software  to  crack 
keys  with  relative  ease. 

Barkley  said  the  SSN  part¬ 
ners  don’t  plan  to  wait  until  the 
IEEE  issues  its  final  version  of 
the  802.i  standard  but  will  in¬ 
stead  incorporate  TRIP  into 
their  products  as  soon  as  pos¬ 
sible.  And  rather  than  wait  for 
the  next  Windows  XP  service 
pack  release,  Microsoft  will  in¬ 


corporate  TRIP  into  XP  before 
the  end  of  the  year,  he  added. 

Dennis  Eaton,  chairman  of 
the  Wireless  Ethernet  Compat¬ 
ibility  Alliance  (WECA),  a 
wireless  LAN  industry  trade 
group  in  Mountain  View,  Calif., 
said  that  final  details  on  an  in¬ 
dustrywide  SSN  standard  are 
“very  close”  and  that  the 
WECA  plans  to  make  a  major 
announcement  next  month. 

John  Pescatore,  an  analyst  at 
Gartner  Inc.,  said  plans  by  the 
industry  to  leapfrog  the  IEEE 
802.1  standards  body  make 
sense  because  the  IEEE  process 
“moves  very  slowly”  and  the 
wireless  LAN  industry  needs 
better  security  immediately. 

Barkley  said  the  first  Win¬ 
dows  XP  service  pack,  released 
earlier  this  month  [QuickLink 
32875],  includes  support  for 


Protected  Extensible  Authenti¬ 
cation  Protocol  (PEAP),  which 
fixes  a  known  vulnerability  in 
the  new  802.1x  standard  that  au¬ 
thenticates  the  identity  of  a  user 
with  a  central  server.  Dan  Bai¬ 
ley,  director  of  wireless  net- 


JUST  THE  FACTS 


The  Safe  Secure 
Networks  Project 

Members  include  Agere  Systems, 
Cisco  Systems,  Intersil,  Microsoft, 
Proxim  and  Symbol  Technologies. 

The  group  plans  to  leapfrog  the 
IEEE  standards  process  by  adopt¬ 
ing  a  protocol  known  as  TKIP  to  help 
prevent  the  cracking  of  keys  used  to 
secure  wireless  LANs. 

A  major  SSN  announcement  on 
TKIP  is  slated  for  next  month;  Mi¬ 
crosoft  plans  to  introduce  TKIP  in 
Windows  XP  by  the  end  of  the  year. 


working  at  NTRU  Cryptosys¬ 
tems  Inc.  in  Burlington,  Mass., 
said  PEAP  can  help  rectify  flaws 
in  802.1x  that  could  possibly  let 
a  hacker  “hijack  a  user  authenti¬ 
cation  session”  through  what  he 
called  “a  man-in-the-middle  at¬ 
tack”  on  such  a  session. 

Linda  Horiuchi,  a  spokeswo¬ 
man  for  Cisco,  said  the  compa¬ 
ny  intends  to  add  PEAP  sup¬ 
port  to  its  Wireless  Security 
suite  this  week  but  declined  to 
provide  further  details. 

Pescatore  said  that  while 
PEAP  and  TRIP  haven’t  gone 
through  the  IEEE  approval 
process,  they  will  become  de 
facto  standards  because  of  the 
size  and  influence  of  the  com¬ 
panies  backing  them.  “They’re 
better  than  the  [current]  alter¬ 
natives,  and  [the  manufactur¬ 
ers]  have  to  ship  something.”  I 
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IBM,  Intel  Set  Plans  to  Work  Together  on  Blade  Servers 


Devices  will  support 
e-mail ,  other  applications 

BY  BOB  BREWIN 

Technology  heavyweights  IBM  and  In¬ 
tel  Corp.  last  week  said  they’re  teaming 
up  to  develop  high-density  blade 
servers  that  will  use  Intel  processors 
and  be  able  to  run  corporate  applica¬ 
tions  such  as  e-mail,  firewalls  and 
e-commerce  systems. 

The  two  companies  are  also  cooper¬ 
ating  on  the  development  of  blade  serv¬ 
er  chassis  and  related  networking  and 
systems  management  technology.  Tim 
Dougherty,  director  of  blade  server 
strategy  for  IBM’s  server  group,  said 
the  company  plans  within  a  month  to 
introduce  new  systems  developed 
through  the  partnership. 

Blade  servers  are  modular  computers 
housed  on  a  tightly  packed  board  that’s 
designed  to  squeeze  more  processing 
power  into  a  standard  rack  with  far  less 
cabling  than  older  rack-mounted  sys¬ 
tems  require.  Framingham,  Mass.- 
based  IDC  predicts  that  worldwide 
blade  server  sales  will  total  only  about 
$120  million  this  year  but  will  grow  to 
$3.7  billion  in  2006. 

The  move  by  IBM  and  Intel  follows 
Hewlett-Packard  Co.’s  introduction  last 
month  of  dual-processor  blade  devices 


aimed  at  applications  such  as  Web  host¬ 
ing  and  streaming  media  [QuickLink 
32499].  HP  said  it  will  add  a  four-CPU 
model  early  next  year,  and  Dell  Com¬ 
puter  Corp.  disclosed  that  it  plans  to 
field  a  line  of  modular  blade  servers 
next  year. 

IBM  already  offers  low-end  blade 
servers.  Now  it  plans  to  use  Intel’s 
Xeon  server  chips  to  move  into  more 
complex  middle-tier  applications,  said 
Dougherty,  citing  the  Microsoft  Ex¬ 
change  and  Lotus  Domino  e-mail  sys¬ 
tems,  as  well  as  front-end  processing  for 
enterprise  resource  planning  systems. 

“They’re  putting  more  power  on  the 
blade,”  said  Gordon  Haff,  an  analyst  at 


Illuminata  Inc.  in  Nashua,  N.H. 

Phil  Brace,  director  of  marketing  at 
Intel’s  enterprise  platforms  group,  said 
the  two  companies  are  initially  working 
on  devices  based  on  the  Xeon  and  Xeon 
MP  processors.  But  systems  will  also  be 
built  around  the  64-bit  Itanium  2  chip 
that  Intel  released  in  July,  he  added. 

Both  IBM  and  Intel  will  be  able  to  of¬ 
fer  all  the  jointly  developed  products  to 
their  respective  customer  bases.  IBM 
said  it  will  market  a  full  portfolio  of 
blade  server  technologies  to  corporate 
users.  And  later  this  year,  Intel  plans  to 
make  Xeon-based  blade  servers  avail¬ 
able  to  hardware  vendors  who  don’t 
want  to  develop  their  own  systems.  D 


RLX  Rollout  Boosts 
Blade  Server  Power 

RLX  Technologies  Inc.  last  week  expanded  its 
line  of  blade  servers,  releasing  more  powerful 
hardware  as  well  as  upgraded  systems  man¬ 
agement  and  clustering  software. 

The  Woodlands,  Texas-based  RLX  rolled 
out  a  high-end  ServerBlade  1200i  system 
that’s  based  on  Intel's  1.2-GHz  Pentium  III  chip 
for  mobile  devices.  The  new  machine  offers 
twice  the  memory  capacity  and  50%  more 
processor  speed  and  disk  storage  space  than 
the  800i  model  RLX,  which  shipped  in  March. 


Until  now,  RLX  has  pushed  to  fit  as  many 
blade  servers  as  possible  into  a  single  system 
chassis.  The  company  can  squeeze  24  of  its 
earlier  high-density  servers  into  one  cabinet, 
thanks  to  the  use  of  processors  made  by  San¬ 
ta  Clara,  Calif.-based  Transmeta  Corp. 

The  more  powerful  Pentium  III  chip  limits 
how  closely  the  1200i  servers  can  be  stacked 
together,  but  it  also  makes  them  more  suitable 
for  “performance-sensitive”  applications,  said 
John  Schmitz,  a  marketing  manager  at  RLX. 

Users  can  put  12  of  the  1200i  blades  in  one 
of  RLX's  chassis.  Each  blade  server  supports 
up  to  26B  of  memory  and  two  60GB  disk 
drives,  RLX  said.  Prices  start  at  $1,529. 

-  Ashlee  Vance,  IDG  News  Service 


UnitedLinux  Group  Names  GM, 
Readies  Beta  Code  for  Merged  OS 


BY  TODD  R.  WEISS 

UnitedLinux,  the  fledgling  vendor  con¬ 
sortium  that’s  trying  to  develop  a  uni¬ 
form  version  of  the  open-source  oper¬ 
ating  system,  last  week  announced  the 
hiring  of  its  first  general  manager  and 
said  it  plans  to  release  a  beta-test  ver¬ 
sion  of  the  software  today. 

The  beta  source  code  will  be  posted 
on  the  UnitedLinux  Web  site  and  made 
available  for  free  download.  Paula 
Hunter,  who  is  now  heading  the  joint 
development  partnership,  said  during  a 
teleconference  that  one  of  her  initial 
priorities  will  be  to  help  UnitedLinux 
prepare  for  a  scheduled  launch  of  its 
operating  system  by  year’s  end. 

Hunter  said  she  will  also  focus  dur¬ 
ing  the  next  100  days  on  trying  to  con¬ 


vince  additional  companies  to  join  the 
UnitedLinux  effort  and  on  developing 
training,  certification  and  support  pro¬ 
grams  for  the  new  operating  system. 
She  worked  most  recently  as  vice  presi¬ 
dent  of  marketing  at  Xevo  Corp.,  a 
Marlboro,  Mass.-based  vendor  of  ser¬ 
vice  management  software. 

UnitedLinux  was  formed  last  spring 
by  four  rival  vendors  of  the  open- 
source  software  —  SuSE  Linux  AG, 
Conectiva  SA,  Turbolinux  Inc.  and 
Caldera  International  Inc.,  which  has 
since  changed  its  name  to  The  SCO 
Group.  The  companies  agreed  to  com¬ 
bine  their  separate  Linux  offerings  into 
a  single  operating  system  aimed  at  cor¬ 
porate  users  [QuickLink  30239]. 

More  than  a  dozen  hardware  and  ap¬ 


plication  software  vendors  are  also  tak¬ 
ing  part  in  the  consortium,  according  to 
UnitedLinux  officials.  But  Red  Hat  Inc., 
the  dominant  Linux  vendor  in  the  U.S., 
is  notably  absent  from  UnitedLinux. 

George  Weiss,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn.,  said  another 
potential  problem  for  UnitedLinux  is 
the  fact  that  Hunter  doesn’t  have  a 
background  in  Linux  or  open-source 
technology.  “The  nails  are  starting  to 
get  hammered  into  the  coffin”  of  the 
consortium,  he  said. 

Hunter  acknowledged  that  she  has 
not  worked  directly  with  Linux,  but  she 
said  her  ability  to  help  reach  a  consen¬ 
sus  is  more  important.  “My  responsibil¬ 
ities  are  to  pull  together  the  collective 
expertise  of  four  companies  with  deep 
Linux  experience,”  Hunter  said.  I 


LINUX  DOWNLOAD 

For  full  coverage  of  Linux  and  other  open-source 
technologies,  head  to  our  Linux  News  &  Features  page: 

QuickLink  slOOO 
www.computerworld.com 
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NEWS 


Worm  Sets  Up  Peer-to-Peer  Attack  Network 


BY  PAUL  ROBERTS 

A  new  computer  worm  infect¬ 
ed  thousands  of  Linux-based 
Web  servers  last  week  and 
used  them  to  create  a  peer-to- 
peer  network  with  the  poten¬ 
tial  to  carry  out  distributed 
denial-of-service  (DDOS)  at¬ 
tacks.  But  security  analysts 
were  divided  over  how  big  a 
threat  the  worm  heralds  for 
systems  on  the  Internet. 

The  worm,  known  officially 
as  Apache_mod_ssl  and  more 
informally  as  Slapper,  exploits 
a  previously  disclosed  buffer 
overrun  vulnerability  in  Ver¬ 
sion  2.0  of  the  Open  Secure 
Sockets  Layer  data  transmis¬ 
sion  protocol.  F-Secure  Corp., 
a  security  software  vendor, 
said  nearly  14,000  systems 
worldwide  running  the  open- 
source  Apache  Web  server 
software  had  been  infected  by 
Slapper  by  last  Monday. 

Coordinated  Attack 

Once  they  have  been  infil¬ 
trated  by  the  worm,  Web 
servers  effectively  become 
hosts  in  a  large  peer-to-peer 
network  of  infected  machines, 
which  then  scan  for  other  vul¬ 
nerable  systems  in  a  coordinat¬ 
ed  effort,  analysts  said. 

That  sets  Slapper  apart  from 
its  worm  predecessors,  said 
Russ  Cooper,  a  security  con¬ 
sultant  at  TruSecure  Corp.  in 
Herndon,  Va.  “Slapper  is  new 
in  the  sense  that  [the  infected 
machines]  keep  in  touch  with 
each  other  using  their  own  net¬ 
work,”  he  said. 

The  current  version  of  Slap¬ 
per  doesn’t  appear  to  be  pro¬ 
grammed  to  carry  out  actual 
DDOS  attacks,  Cooper  added. 
Still,  he  cautioned  that  future 
variants  of  the  worm  might  in¬ 
clude  the  ability  to  send  and 
receive  instructions. 


well  documented.  “Anybody 
getting  a  hold  of  the  source  can 
quickly  learn  how  to  exploit 
the  virus  itself,”  he  said. 


While  setting  up  a  peer-to- 
peer  network  of  infected  de¬ 
vices  is  new  behavior  for  a 
worm,  it’s  not  an  entirely  new 


phenomenon,  said  Marty  Lind¬ 
ner,  an  incident-handling  team 
leader  at  the  CERT  Coordina¬ 
tion  Center  at  Carnegie  Mellon 
University  in  Pittsburgh. 

“This  is  not  the  first  time 
that  we’ve  seen  something  that 


produces  a  command-and-con- 
trol  network,”  he  said.  “That’s 
not  new.  This  is  just  another 
method  of  delivery.”  ► 


Roberts  writes  for  the  IDG 
News  Service. 


F-Secure  said  many  of  the  in¬ 
fected  systems  were  quickly 
cleansed  by  IT  managers.  By 
last  Thursday,  scans  conduct¬ 
ed  by  F-Secure  detected  fewer 
than  200  active  IP  addresses  in 
Slapper’s  peer-to-peer  network. 

But  Tony  Magallanez,  a  sys¬ 
tems  engineer  at  F-Secure’s 
North  American  operations, 
said  Slapper’s  source  code  is 
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Complete  SAN  LAN  performance  tools. 
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MARYFRAN  JOHNSON 


Innovation  Still  Matters 


HE  HEAVY  FOG  of  buzzword-compliant 
marketing  and  breathless  exaggeration 
surrounding  most  technology  products 
would  give  any  sober  IT  manager  pause 
before  purchasing  a  mouse  pad,  let 


alone  something  impor¬ 
tant.  That’s  especially 
true  today,  when  proving 
the  value  of  IT  spending 
with  hard  numbers  and 
bottom-line  results  is  not 
just  politically  smart  but 
also  downright  essential. 

In  our  front-page  story 
last  week  [“Windows  XP 
Slow  to  Gain  Foothold,” 

QuickLink  32873],  the  re¬ 
luctance  of  corporate  IT 
to  jump  on  the  next  Mi¬ 
crosoft  bandwagon  spoke  volumes 
for  the  practical,  payback-oriented 
mind-set  of  technology  buyers. 

“This  is  an  upgrade  that  offers 
nothing  to  a  business  customer,”  one 
CIO  said  dismissively  about  XP.  Oth¬ 
ers  cited  the  high  costs,  the  low  need 
and  the  general  weariness  from  hav¬ 
ing  just  slogged  through  the  Win¬ 
dows  2000  upgrade. 

Yet  we  know  that  even  with  IT 
budgets  flattened  and  spending 
squeaky  tight,  the  need  for  business 
innovation  is  still  there,  perhaps 
more  pressing  than  ever  before.  So, 
what  products  are  worth  a  second 
look  through  the  beady  eyes  of  IT 
buyers?  The  best  source  for  that  an¬ 
swer,  of  course,  would  be  you  and 
your  peers,  and  that’s  whom  we 
turned  to  for  Computerworld’s  Inno¬ 
vative  Technology  Awards  2002. 

Beginning  on  page  26  in  this  issue, 
we  profiie  the  10  winners  in  this  cus¬ 
tomer-choice  contest,  which  drew 
i  bout  200  nominations  from  the 

■  <  *’  s  of  IT  customers  themselves. 

.  he  winners  ranged  from  small  com- 
:'vm-  i  es  you’ve  likely  never  heard  of  to 
major  vendors  such  as  IBM  and  Soft¬ 
ware  AG.  Their  offerings  included 
everything  from  network  security 
and  enterprise  software  to  data  man¬ 
agement,  biometrics  and  wireless 
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optical  technology. 

In  some  cases,  the  ROI 
was  memorably  speedy. 
When  First  Citizens 
Bank  installed  an  intru¬ 
sion-detection  system 
from  Entercept  Security 
Technologies,  it  was  just 
three  days  before  the  in¬ 
famous  Code  Red  worm 
struck  nationwide.  “We 
kept  humming  along, 
without  skipping  a  beat, 
so  . . .  that  was  a  definite 
return  on  investment,”  said  Jay 
Ward,  a  senior  network  security  ana¬ 
lyst  at  the  bank. 

In  other  cases,  the  customer  sat¬ 
isfaction  results  were  compelling 
enough  to  wave  the  expenditure  past 
budget  gatekeepers.  Terabeam’s 
wireless  optics  product,  for  example, 
enabled  the  Elliott  Grand  Hyatt 
Hotel  in  Seattle  to  provide  more 
flexible  high-bandwidth  connections 
for  the  demanding  techies  who  often 
stay  there. 

In  every  case,  we  noticed  that  the 


driving  force  behind  the  tech  invest¬ 
ments  in  these  companies’  products 
was  the  potential  for  real  payback, 
really  fast.  Nobody  was  looking  for 
the  buzz  of  a  hot  product,  but  every¬ 
body  was  looking  for  ways  to  im¬ 
prove  business  results.  Innovation 
still  matters. 

*  *  * 

Another  way  we  hope  to  help  you 
sort  out  the  most  promising  prod¬ 
ucts  on  technology’s  cutting  edge  is 
with  a  column  that  made  its  debut  in 
our  news  section  last  week  [Quick- 
Link  32813].  Longtime  technology 
journalist  Mark  Hall  will  be  taking  a 
skeptical,  flinty-eyed  look  at  upcom¬ 
ing  products  and  services  in  his  “On 
the  Mark”  column  each  week  (see 
page  8).  “The  best  IT  operations  use 
a  balance  of  mundane  products  and 
some  pretty  cool  technology,”  Mark 
notes.  “Staying  aware  of  what’s  on 
the  cutting  edge  —  and  what’s  worth 
a  second  look  —  is  easier  said  than 
done  with  literally  thousands  of 
companies  vying  for  your  attention.” 

We  hope  you’ll  find  Mark’s  new 
column  to  be  a  highly  useful,  hype- 
free  technology  filter.  His  mandate  is 
to  look  ahead  and  detect  the  most  in¬ 
telligent  signs  of  life  in  the  vendor 
community.  He’d  love  to  hear  from 
you  with  ideas  and  suggestions  at 
mark_hall@computerworld.com.  ft 


PIMM  FOX 

Desktop 
Management 
Boosts  IT 

ONE  OF  THE  biggest 

problems  for  Stephen 
Kutzer  when  he  joined 
Washington-based  CarrAmer- 

ica  Realty  as  vice  president  of 
IT  operations  was  that  he  didn’t  know 
the  true  state  of,  well,  the  company’s 
IT  operations. 

CarrAmerica  owns  25  million  square 
feet  of  office  space  in  11  major  U.S. 
markets  and  manages  60  additional 
buildings  in  the  same  areas.  It  counts 
leasing  and  building  agents,  porters, 
lobby  receptionists  and  security  per¬ 
sonnel  as  possi¬ 
ble  computer 
users.  And  while 
a  third  of  all  its 
workers  (in  fi¬ 
nance,  account¬ 
ing,  IT  and  hu¬ 
man  resources) 
are  in  northern 
Virginia,  the  rest 
are  spread  around 
the  country. 

“I  didn’t  know 
who  was  using  what,”  says  Kutzer.  “I 
didn’t  even  know  exactly  how  many 
users  we  had,  because  some  of  our  900 
people  never  touch  a  computer.” 

Kutzer  decided  to  deploy  a  desktop 
management  system  and  to  outsource 
help  desk  functions,  using  an  Internet 
connection  and  thin-client  software 
from  Everdream  Corp. 

Applying  the  ASP  concept  with  a 
heavy  emphasis  on  service-level  agree¬ 
ments  (help  desk  calls  must  be  an¬ 
swered  in  under  60  seconds),  Ever¬ 
dream  gives  Kutzer  an  inventory  of 
equipment  and  information  to  calcu¬ 
late  upgrades  and  identify  problems. 

Among  the  issues  Everdream  turned 
up  was  that  a  previous  deployment  of 
Windows  98  had  been  compromised 
because  of  poor  imaging  onto  the 
desktops.  And  in  addition  to  problem 
discovery,  Kutzer  got  better  informa¬ 
tion  about  his  infrastructure.  For  ex¬ 
ample,  with  a  couple  of  clicks,  he  can 
export  into  a  spreadsheet  user  names, 
locations,  computer  make  and  model 

More  columnists  and  links  to  archives  of  previous 
columns  are  on  our  Web  site: 

©  computemvorld.com/columns 


pimm  fox  is  a  freelance 
writer  in  San  Francisco. 
Contact  him  at 
pimmfox@pacbefl.net. 
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NEWSOPINION 


numbers,  CPU  information,  how  much 
data  is  on  a  hard  drive,  and  its  software 
configurations. 

Rolling  out  managed  desktop  ser¬ 
vices  is  less  cumbersome  because  it’s 
possible  to  check  specific  require¬ 
ments.  “I  know  which  machines  we 
need  to  upgrade  to  XP,  because  I  can 
see  who  needs  a  500-MHz  processor 
and  128MB  of  RAM,”  he  says. 

A  surprise  for  Kutzer  was  the  num¬ 
ber  of  applications  in  use  at  CarrAmer- 
ica.  Everdream  identified  more  than 
1,600  unique  applications:  “I  was  wor¬ 
ried  if  we  were  in  compliance,”  Kutzer 
says.  Now  the  company  is. 

Kutzer  secured  senior-level  buy-in 
to  managed  desktop  services  by  turn¬ 
ing  over  help  desk  functions  to  Ever¬ 
dream,  cutting  four  IT  staffers  in  the 
process.  Currently,  CarrAmerica  relies 
on  Everdream  for  77%  of  trouble  tick¬ 
ets  (the  goal  is  90%),  and  a  24-hour 
help  desk  lets  people  beyond  the  Belt- 
way  get  help  during  their  work  hours. 

In  addition  to  the  benefits  of  know¬ 
ing  what’s  going  on  in  IT,  the  company 
can  use  Everdream  to  help  implement 
IT  standards  after  an  acquisition. 

“Senior  managers  got  that  right 
away,”  says  Kutzer.  “And  my  IT  people 
like  it  because  they  get  to  do  more  in¬ 
teresting  things  than  fix  printers.”  I 

DAN  GILLMOR 

Most  Trade 
Shows  Lose 
Focus  on  IT 

HERE’S  A  CONFESSION: 
For  all  their  nuttiness 
and  hassle,  I  like  trade 
shows.  But  I’m  running  low 
on  good  reasons  to  attend 

them  these  days.  And  from  the  looks 
of  things,  IT  managers  aren’t  finding 
many  compelling  reasons  either. 

Lots  of  companies,  including  some 
big  ones,  have  run  out  of  reasons  to 
rent  booth  space,  too.  Sony,  for  exam¬ 
ple,  has  announced  its  withdrawal  from 
Comdex,  the  formerly  essential  show 
held  each  November  in  Las  Vegas. 

What’s  happened  to  make  this  so? 

I’m  not  sure  which  is  the  chicken  and 
which  is  the  egg  here,  but  exhibitors  are 
less  inclined  to  participate  in  shows, 
and  the  rest  of  us  aren’t  attending. 

Certainly,  the  technology  recession 
has  made  it  more  difficult  for  compa¬ 
nies  to  spend  on  trade  exhibits.  But 


maybe  that’s  also  because 
there’s  so  little  true  innova¬ 
tion  occurring  today.  In  a 
market  where  a  few  giants 
are  increasingly  dominating 
everyone  else,  that  means 
there’s  less  to  show. 

And  with  travel  budgets 
getting  whacked,  where  IT 
execs  might  have  sent  three 
or  four  people  in  better  times 
to  a  big  show,  now  they’ll 
send  one  or  two  at  most. 

The  basic  unpleasantness 
of  some  shows  is  another  factor.  When 
you’re  waiting  in  endless  taxi  lines,  pay¬ 
ing  extortionate  hotel  room  rates  and 
generally  being  hassled  in  every  way, 
the  fun  of  the  event  tends  to  pale  a  bit. 

Don’t  forget  the  glut  of  shows  that 
sprang  up  during  the  tech  boom.  You 
could  have  spent  your  entire  year  do¬ 
ing  nothing  but  attending  trade  events, 


most  of  which  featured  the 
same  stuff  you  saw  at  the 
last  one.  That  helped  make 
even  the  best  shows  seem 
less  special. 

The  Web  itself  has  been 
a  factor.  Some  companies 
that  used  big  shows  for 
product  announcements 
have  learned  that  they  can 
get  people’s  attention  in 
other  ways  and  that  the  Net 
is  the  world’s  greatest  ex¬ 
hibit  floor,  especially  for 
demonstrating  software. 

So  why  are  some  shows  still  alive,  if 
not  thriving?  Because  for  all  the  rea¬ 
sons  not  to  go,  there  are  still  plenty  of 
reasons  to  attend  even  now. 

Knowing  general  trends  is  fine,  but 
there’s  nothing  like  seeing  the  entire 
trade  lined  up  aisle  after  aisle.  Shows 
are  also  the  place  for  meetings.  When 


so  many  executives  and  product  man¬ 
agers  turn  up  in  one  place,  the  expres¬ 
sion  “fish  in  a  barrel”  comes  to  mind. 
Many  companies  do  their  most  impor¬ 
tant  schmoozing  off  the  show  floor  in 
hotel  suites  surrounding  convention 
centers,  showing  their  best  wares  to 
their  biggest  users. 

Finally,  don’t  forget  the  serendipity 
factor.  I  always  meet  new  people  or  un¬ 
expectedly  run  into  old  acquaintances, 
and  those  encounters  can  be  valuable. 
At  every  show  I  attend,  moreover,  I 
walk  the  outer  reaches  of  the  exhibit 
floors,  visiting  the  cheaper-to-rent 
booths  that  get  much  less  traffic  be¬ 
cause  of  their  locations.  Invariably,  I 
come  across  a  product  or  company 
that  isn’t  just  on  the  edge  of  the  floor, 
but  also  on  the  cutting  edge  of  its  field. 

My  bottom  line:  I’m  more  picky  now. 
But  I  won’t  stop  attending  conferences 
entirely.  I 


READERS’ LETTERS 


H-1B  Side  Effect 

I  FOUND  YOUR  article 
“Congress  May  Bear 
Brunt  of  H-1B  Anger” 
[QuickLink  32229]  very  in¬ 
teresting.  Being  among  the 
many  unemployed  technolo¬ 
gy  professionals  for  more 
than  a  year  now,  I  feel  that 
the  Congress  who  created 
this  mess  should  get  an  ear¬ 
ful,  and  a  boot  out  of  office. 
But  there  is  one  very  amus¬ 
ing  side  to  the  mess:  In  the 
last  few  months,  the  re¬ 
cruiters  I  talk  with  regularly 
are  being  quietly  replaced 
by  the  H-1B  people  they 
hired  only  a  year  or  so  ago. 
Virgil  Anderson 
Senior  consultant 
Kernersville,  N.C. 


Unreported  Costs 

IT’S  INTERESTING  that 
Computerworld  is  devot¬ 
ed  to  advanced  technolo¬ 
gies  and  the  future  of  sys¬ 
tems  integration,  and  yet  it 
fails  to  cover  the  most  fun¬ 
damental  structure  neces¬ 
sary  to  accommodate  the 
connectivity  and  integration 
you  are  reviewing.  Without  a 
properly  designed  copper 
and  fiber  infrastructure, 
changes  in  technology  direc¬ 
tion  will  be  so  costly  as  to 


render  any  ROI  impotent  in 
the  face  of  economic  down¬ 
turn.  For  example,  there’s  lit¬ 
tle  opportunity  to  convince 
senior  management  that 
VOIP  is  cost-effective  when 
the  data  center  design  can’t 
accommodate  the  change  re¬ 
quirements  without  signifi¬ 
cant  overhaul. 

If  you’re  wondering  how  I 
know  all  this,  I  was  vice 
president  of  global  infra¬ 
structure  at  Citibank  for  a 
number  of  years  and  insti¬ 
tuted  a  design  and  methods 
policy  that  allows  upgrades 
without  disruption.  The  real 
world  is  a  lot  more  compli¬ 
cated  than  the  high-level  ap¬ 
plications  world  that  many 
of  your  articles  describe. 
Martin  Zuckerman 
Director 
Teswaine  Inc. 

New  York 

m.zuckerman@teswaine.org 


Eliminating  Paper 

liked  that  the  column 
“9/11  Prompts  Paper 
Chase  out  the  Door” 
[QuickLink  32533]  provided 
a  concrete  example  of  how 
an  IT  process  actually  added 
value  to  an  organization, 
both  by  enabling  more  col¬ 
laboration  and  making  it 
easier  to  access  documents 


across  the  organization  (and 
cut  down  on  paper  waste). 
Most  organizations  I  have 
contact  with  don’t  even  try 
to  educate  employees  on  us¬ 
ing  electronic  documents 
and  report-viewers  to  save 
on  paper;  everyone  still 
prints  everything.  Perhaps 
it’s  time  for  industrial- 
strength  sticky  notes  or  an 
annotation  software  package 
that  will  gain  widespread 
adoption. 

George  Rios 
Decision-support  manager 
Loma  Linda,  Calif. 


Remotely  Accurate 

N  THE  20  years  I’ve  been 
consulting  in  the  tele¬ 
commuting  field,  I  don’t 
remember  seeing  an  indict¬ 
ment  of  this  work  practice 
that  is  more  inaccurate  and 
unfounded  than  David  Zim¬ 
mer’s  letter  in  the  Aug.  26  is¬ 
sue  [QuickLink  31925],  The 
government  was  never 
“levying  penalties  if  compa¬ 
nies  didn’t  institute  telecom¬ 
muting.”  The  Clean  Air  Act 
amendments  required  some 
employers  in  some  areas  to 
find  ways  to  reduce  the 
number  of  vehicles  their 
employees  drove  to  work, 
but  telecommuting  was  nei¬ 
ther  mandated  nor  was  its 


nonuse  punished.  And  tele¬ 
commuters  aren’t  “routinely 
passed  over  for  promotions 
and  special  projects”  (while 
this  may  happen  sometimes, 
it’s  much  more  common  that 
telecommuters’  managers  re¬ 
port  those  employees  to  be 
more  promotable  and  more 
capable  of  broader  responsi¬ 
bilities).  The  biggest  obsta¬ 
cles  to  telecommuting,  as 
Zimmer  suggests,  are  man¬ 
agement  attitudes  about  re¬ 
mote  work.  I’ve  often  told 
clients  that  the  biggest  ob¬ 
stacle  to  telecommuting  is 
the  wealth  of  myth  and  mis¬ 
information  about  exactly 
what  it  is,  how  it  works  and 
how  easily  it  can  be  tailored 
to  meet  business  needs. 

Gil  Gordon 

Gil  Gordon  Associates 

Monmouth  Junction,  N.J 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld. 
P0  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701 
Fax:(508)879-4843. 

E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 

More  current  letters  on  these  ant)  othei 
topics  are  on  our  Web  site: 

©  computerworld.com/letters 


dan  gillmor  is  technol¬ 
ogy  columnist  at  the 
San  Jose  Mercury 
News.  Contact  him  at 

dgillmor@sjmercury.com. 
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Switch  to  HP  Procurve  and  build  it  to  last. 

The  new  HP  Procurve  Switch  5300x1  series  delivers  the  fastest  layer  3/4  features 
for  the  price  of  the  competition's  layer  2  modular  switches.  And  HP  Procurve  switches 
are  fully  interoperable  and  scalable,  making  it  easier  than  ever  to  add  the  switching 
capacity  you  need  for  current  and  future  growth.  These  convergence-ready  switches 
provide  flexibility,  high  port  density,  free  software  upgrades  and  a  lifetime  warranty. 

Now  HP  Procurve  Networking  gives  you  3  unbeatable  offers: 

•  Trade  in  any  Cisco  2924,  2948,  3548,  4006  or  6500  switches  with  no  trade-in 
limits  when  they  are  traded  for  HP  Procurve  5300  series  switches 

•  Get  a  $400  cash  rebate  on  the  HP  Procurve  4148gl  and  up  to  $500  off 
mini-GBIC  modules  or  transceivers 

•  Buy  an  HP  Procurve  5300x1  switch  and  get  a  free  mini-GBIC  module  worth  $1,299 

Find  out  more  at  www.hpprocurve.com/bestvalue  or  call  us  now  to 
talk  to  an  HP  Procurve  professional  at  1-800-477-6111  extension  41682. 
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©  2002  Hewlett-Packard  Company.  Ail  nghts  reserved.  For  full  terms  and  conditions  visit  www.hpprocurve.com/bestvalue. 
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THIS  WEEK 


US  AIRWAYS’  Stanley  Davis  tapped 
Arbortext  to  create  a  data  store  of  content 


T0P-FLI6HT  TECHNOLOGY 

COMPUTERWORLD  Last  sPring> Com' 

puterworld  asked 
IT  customers  to 
nominate  vendors 
offering  leading- 
edge  products  and  services  that 
provide  measurable  payback  on 
investment.  Computerworld  edi¬ 
tors  and  a  panel  of  outside  experts 
sorted  through  the  200  nomina¬ 
tions  we  received  and  selected 
the  winners  of  the  Innovative 
Technology  Awards  2002,  the  first 
in  what  will  be  an  annual  recogni¬ 
tion  of  excellence.  The  winners  are: 

ENTERPRISE  SYSTEMS 

■  Arbortext  Inc. 

■  IBM 

■  Metralech  Corp. 

SECURITY 

■  BioconXInc. 

■  Maze  Networks  Inc. 

■  Entercept  Security  Technologies 

E-COMMERCE 

■  Cyclone  Commerce  Inc. 

DATA  MANAGEMENT 

■  Stratify  Inc. 

■  Software  AG 

WIRELESS 

■Terabeam  Corp. 

Read  more  about  these  companies  and  see 
our  list  of  the  10  companies  that  received 
honorable  mention  recognition.  PAGE  26. 

ALSO  THIS  ISSUE 

Vince  Tuesday  turns  detective 
to  find  a  potential  hacker  from 
inside  the  corporate  firewall. 

PAGE  38 


INNOVATIVE 

TECHNOLOGY 


ROBERT  L.  MITCHELL 

Innovation  Is  the  Object 

INNOVATION  IS  A  CONCEPT  in  danger  of  being  permanently  devalued 
by  overuse  and  relegated  to  the  realm  of  marketingspeak.  As  our  In¬ 
novative  Technologies  special  report  in  the  following  pages  shows, 
what  IT  managers  see  as  innovation  has  nothing  to  do  with  hype.  It’s 
all  about  making  their  companies  run  more  effectively  and  efficiently. 


And  sometimes  innovation  is  based  on  something 
as  prosaic  as  a  new  standard,  like  the  one  under  con¬ 
sideration  right  now  that  could  literally  become  a 
blockbuster  for  enterprise  storage.  The  T10  Techni¬ 
cal  Committee,  part  of  the  International  Committee 
on  Information  Technology  Standards,  is  working  on 
the  Object-Based  Storage  Device  Commands  (OSD) 
standard.  OSD  will  turn  files,  records,  directories  and 
other  storage  elements  into  objects  that  storage  man¬ 
agement  software  can  access  using  an  extended 
SCSI-3  command  set. 

Storage  managers  (think  file  systems  like 
New  Technology  File  System,  or  NTFS,  and 
databases  like  Oracle)  need  no  longer  write 
and  manage  physical  data  blocks.  That  job 
will  move  into  the  SCSI  storage  device  itself, 
along  with  the  metadata  and  attributes  re¬ 
quired  for  the  device  to  internally  manage  those 
stored  objects. 

What’s  in  it  for  you?  By  breaking  away  those  block- 
level  and  metadata  management  chores,  OSD  reduces 
the  storage  manager’s  job  to  one  of  simply  mapping 
files  and  file  structures  to  objects.  That  should  lead 
to  better  interoperability  and  set  the  stage  for  conver¬ 
gence  of  storage-area  network  (SAN)  and  network- 
attached  storage  (NAS)  technologies.  OSD-compliant 
storage  managers  wilt  be  able  to  share  data  on  the 
same  device.  Theoretically,  backups  initiated  on  a 
Windows  file  system  could  even  be  restored  to  a 
Solaris  file  system  (in  the  unlikely  event  that  both 
could  agree  on  a  common,  shared  attribute 
set)  because  the  data  and  its  attributes 
have  been  effectively  separated  from  the 
operating  system. 

So  OSD  makes  it  possible  for  vendors  to 
create  a  universal  file  system  (which  oper¬ 
ating  system  vendors  will  surely  resist),  and 
brings  a  cross-platform  capability  that  to¬ 
day’s  proprietary  SANs  lack.  OSD  also  logi¬ 
cally  separates  control  and  management  in¬ 
formation  from  the  data  path,  which  means 
applications  don’t  suffer  the  latency  penal¬ 
ties  associated  with  going  through  an  inter¬ 
mediate  file  system,  such  as  a  NAS  filer. 

OSD  essentially  combines  the  direct- 


write  performance  of  SANs  and  the  cross-platform 
benefits  of  NAS.  And  moving  object  metadata  and 
attributes  out  of  the  file  system  also  allows  for  more 
scalable  storage,  eliminating  the  file  server  or  NAS 
filer  head  as  a  scalability  choke  point.  The  argument 
over  whether  to  serve  up  NAS-style  files  or  SAN- 
style  blocks  goes  away:  Object-based  storage  should 
drive  convergence  from  the  ground  up. 

Another  potential  benefit  of  OSD  is  its  ability  to 
improve  data  security.  Today,  disk-level  security  is 

limited  to  crude  tools  such  as  LUN  masking 
and  zoning.  OSD  will  make  this  more  gran¬ 
ular.  “Because  objects  are  self-describing, 
you  can  ascribe  a  security  domain  to  each 
one,”  says  Michael  Mesnier,  a  storage  archi¬ 
tect  at  Intel  and  co-chairman  of  the  Storage 
Networking  Industry  Association’s  OSD 
Technical  Working  Group,  which  developed  the 
specification.  With  OSD,  the  user  (called  an  initiator) 
must  present  a  key  to  the  storage  device  before  it 
grants  access  to  the  requested  data.  The  file  system 
determines  the  user  authorization  and  key  distribu¬ 
tion  methodology;  the  OSD-based  device  enforces  it. 

While  OSD  will  drive  convergence,  it  won’t  make 
the  SAN/NAS  debate  go  away  anytime  soon.  That’s 
because  the  specification  doesn’t  address  how  data 
should  be  transported.  Both  architectures  will  con¬ 
tinue  to  evolve  as  object-based  storage  emerges,  but 
distinctions  between  them  will  blur. 

IT  isn’t  likely  to  see  the  benefits  of  object-based 
storage  until  a  new  generation  of  intelli¬ 
gent  (and  more  expensive)  OSD-complaint 
SCSI  drives  and  file  managers  appear. 

That  will  take  time.  For  example,  Micro¬ 
soft’s  long-promised  object-based  file  sys¬ 
tem,  code-named  Longhorn,  will  morph 
NTFS  into  an  object  database.  But  it  won’t 
arrive  until  at  least  2006,  and  its  support 
for  OSD  is  unclear. 

Nonetheless,  Mesnier  predicts  a  base 
OSD  standard  by  year’s  end.  Intel  is  build¬ 
ing  an  open-source  reference  implementa¬ 
tion,  which  Mesnier  says  it  will  release 
this  fall.  The  question  that  remains  is 
whether  vendors  will  run  with  it.  I 


MORE  ON  OSD 

Additional  info  on  the  storage 
device  standard  is  online: 

©  QuickLink  32934 
www.computerworld.com 
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HOW  WE  CHOSE  THE  WINNERS 

During  May  and  June,  Computerworld  invited 
IT  customers  -  those  companies  that  use 
technology  but  don’t  produce  or  sell  it  -  to 
nominate  vendors  they  believe  offer  leading- 
edge  technology  products  or  services  that  pro¬ 
vide  measurable  payback.  We  received  ap¬ 
proximately  200  nominations.  Successful  ven¬ 
dor  candidates  had  to  be  nominated  by  a  cus¬ 
tomer  who  was  currently  using  the  technology. 
Customer  nominations  were  verified  by  Com¬ 
puterworld  by  phone. 

Computerworld  then  surveyed  those  ven¬ 
dors,  asking  specific  questions  about  the  nom¬ 
inated  technology.  Those  surveys  were  first 
vetted  by  a  panel  of  Computerworld  editors 
and  then  divided  among  a  15-person  panel  of 
IT  influencers  for  evaluation. 

Our  outside  panelists  were  Michael  Agens, 
systems  integration  manager  at  Linens  'n 
Things  Inc.;  Jon  Carrow,  director,  global  IT 
sourcing  and  acquisitions,  at  Wyeth  Pharma¬ 
ceuticals;  Frank  A.  Guglielmo,  vice  president, 
enterprise  engineering  group,  at  Soza  &  Co.; 
Melanie  Heintz,  staff  director  at  the  Federal 
Reserve  Bank  of  New  York;  Frank  Flood,  vice 
president  of  information  services  at  Krispy 
Kreme  Doughnut  Corp.;  Cathy  Flotka,  vice 
president  of  IT  at  the  National  Retail  Federa¬ 
tion;  Barry  Kadets,  CIO  and  vice  president 
of  information  systems  at  Bacou  USA  Inc.; 
Anthony  Okrongly,  vice  president  of  IT  at 
Galactic  Ltd.;  Jeff  Orton,  CIO  and  vice  presi¬ 
dent  of  logistics  at  Wilsons  the  Leather  Ex¬ 
perts  Inc.;  Larry  Peterson,  vice  president  of 
corporate  technical  services  at  Gelco  Informa¬ 
tion  Network;  Andre  Mendes,  chief  technology 
integration  officer  at  the  Public  Broadcasting 
Service;  Priscilla  Tate,  executive  director  of  the 
Technology  Managers  Forum;  M.  Lewis 
Temares,  vice  president/CIO  and  dean  of  engi¬ 
neering  at  the  University  of  Miami;  John 
Voeller,  senior  vice  president  and  chief  tech¬ 
nology  officer  at  Black  &  Veatch  Corp.;  and 
Patrick  Wise,  vice  president  of  e-commerce  at 
Landstar  System  Inc. 

Evaluations  were  based  on 
the  following  criteria: 

«  The  company's  technology  is  innovative 
and  original. 

*  It  offers  demonstrable  value  to  corporate 
IT  operations  in  Fortune  1,000  companies. 

» It  creates  a  new  advantage  or  opportunity 

for  customers. 

■3i  Customers  have  successfully  implemented 
the  technology  3nd  are  getting  measurable 
payback  or  competitive  advantage  from  it. 

«  The  technology  will  continue  to  change  the 
way  companies  do  business  or  solve  technol¬ 
ogy  problems  into  the  future. 

The  10  winners  and  10  honorable  mentions 
are  presented  here. 
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Computerworld’s 
customer  choice  awards 
honor  10  vendors  that  other 
cutting-edge  technology 
that’s  creating  business 
value  for  their  customers. 


Arbortext  Inc. 

CATEGORY:  Enterprise  systems 
URL:  www.arbortext.com 
LOCATION:  Ann  Arbor,  Mich. 

FOUNDED:  1982 

TECHNOLOGY:  Epic,  XML  software  for 
publishing  content  dynamically 

KEY  CUSTOMERS:  American  Express 
Co.,  Ford  Motor  Co.,  The  Boeing  Co. 

HOW  IT  WORKS:  Based  on  XML  and 
related  standards,  Arbortext’s  Epic 
Editor  is  used  to  create  information  in 
a  media-independent  format  that  can 
be  stored  on  a  file  system  or  in  a  con¬ 
tent  management  system.  Epic  cre¬ 
ates  a  single  XML-based  source  of 
information  and  automates  the  pub¬ 
lishing  to  all  types  of  media,  including 
the  Web,  print,  CD-ROM  and  wireless 
devices.  The  software  constrains  the 
author  so  the  structure  and  content 
of  the  information  conform  to  the 
XML  data  model  the  system  designer 
specifies.  Because  of  these  con- 

Continued  on  page  28 
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The  downside:  your  walk  through  the  parking  lot  was  long.  The  upside:  it  gave  you  time 
to  think  about  a  way  to  eliminate  the  high  cost  and  hassles  of  overnight  delivery. 

And  lo  and  behold,  you  found  it:  Canon  imageRUNNER™  technology.  It  lets  you  send  documents  anywhere,  in  any  form,  at  any  time, 
over  your  network  or  the  Internet.  Instantaneously.  Just  scan  a  document  into  the  imageRUNNER  and  send  it  — to  desktops,  E-mail 
addresses,  fax  machines,  databases  and  file  servers.  All  of  which  results  in  lowered  costs  and  increased  productivity.  So,  take  pride. 
Thanks  to  Canon  know-how,  your  walk  through  the  parking  lot  is  considerably  shorter.  1 -866-25-CANON  www.imagerunner.com 


Canon  is  a  registered  trademark  and  IMAGERUNNER  and  Canon  know  How  are  trademarks  of  Canon  Inc.  IMAGEANYWARE  is  a  service  mark  of  Canon  U.SA,  Inc.  •■©2002  Canon  U.S  A.,  Inc. 


Canon  KNOW  HOW 
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stralnts,  the  Information  is  consistent 
across  a!i  platforms.  Out  of  the  box,  Epic 
Editor  works  with  file  systems  and  Docu- 
menturn  Inc.’s  Documentum  4i.  An  option¬ 
al  adapter  integrates  Epic  Editor  with  Ora¬ 
cle  Corp.’s  8iFS  repository.  Also  available 
are  integrations  with  repositories  from 
Empolis  GmbH  and  Xyvision  Enterprise 
Solutions  Inc.  Epic  Editor  is  compatible 
with  Windows  95, 98, 2000  and  NT  4.0, 
and  Solaris  7  and  8. 

TiP:  “The  ultimate  success  of  your  imple¬ 
mentation  depends  on  your  data  model, 
so  that’s  the  one  area  where  you  must  not 
skimp,”  says  P.G.  Bartlett,  a  spokesman 
for  Arbortext.  “Whatever  investment  you 
make  in  outside  experience  will  be  re¬ 
turned  many  times  in  lower  implementa¬ 
tion  costs  and  greater  rewards.” 

BY  LINDA  ROSENCRANCE 

Flight  delays  can  be  extremely  infuriat¬ 
ing,  for  business  travelers  in  particular. 

Many  of  these  delays  can  be  traced 
to  aircraft  maintenance  —  the  time- 
consuming  task  of  ensuring  that  each 
plane  is  inspected  and  repaired  before 


BioconX  Inc. 

CATEGORY:  Security 
URL:  www.bioconx.com 
LOCATION:  Minneapolis 
FOUNDED:  1999 

TECHNOLOGY:  Network  security  software 
based  on  biometric  authentication,  which 
replaces  passwords  with  enterprise  single 
sign-on 

KEY  CUSTOMERS:  Antelope  Valley  Health 
Care  District,  DialAmerica  Marketing  Inc. 

HOW  IT  WORKS:  BioconX  software  identi¬ 
fies  users’  fingerprints  by  looking  for 
unique  swirls;  each  unusual  spot  in  the 
fingerprint  is  “marked”  by  the  software 
as  a  personal  characteristic.  A  user  is  au¬ 
thenticated  when  his  fingerprint  matches 
a  previously  scanned  series  of  unique  swirl 
characteristics. 

TIP:  BioconX  Chief  Technology  Officer  Don 
Harris  says  the  software  can  accurately 
identify  fingerprints  more  than  99%  of  the 
time.  The  software  works  with  the  user 
directories  of  Microsoft  Corp.  and  Novell 
Inc.  network  operating  systems  to  authen¬ 
ticate  a  user;  once  identified,  users  gain 
access  to  all  the  applications  they’re 
entitled  to  use. 
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every  flight.  And  it’s  crucial  for  me¬ 
chanics  to  be  able  to  quickly  locate 
the  information  they  need  to  make 
repairs,  because  the  faster  they  can 
do  their  jobs,  the  faster  the  planes  get 
back  in  the  air. 

US  Airways  Group  Inc.,  for  example, 
must  create,  publish  and  maintain 
more  than  13  different  publications 
that  support  the  maintenance  of  its 
entire  fleet  of  300  aircraft,  which  han¬ 
dle  more  than  1,400  flights  every  day. 

Finding  the  right  information  used 
to  take  US  Airways’  mechanics  as  long 
as  15  minutes  using  a  combination  of 
microfilm  and  paper  documents,  says 
Stanley  Davis,  manager  of  electronic 
publications  at  the  Arlington,  Va.- 
based  airline. 

To  shorten  those  delays,  the  airline 


turned  to  publishing  software  from  Ann 
Arbor,  Mich.-based  Arbortext  Inc.  to 
overhaul  its  documentation  production 
process  and  convert  its  manuals  from 
print  to  an  electronic  format,  says  Davis. 

Using  Epic  Editor,  Arbortext’s  XML- 
based  authoring  and  editing  software, 
US  Airways  created  a  central  data 
store  of  content  components  that  can 
easily  be  searched,  managed,  tracked 
and  improved,  Davis  explains.  Changes 
that  occur  in  one  manual  are  now  easi¬ 
ly  reflected  in  other  manuals. 

“The  new  documentation  process 
allows  users  to  share  information  across 
several  different  organizations  and 
computer  platforms  in  the  most  effi¬ 
cient  manner,”  Davis  says.  “It  now  takes 
a  mechanic  about  two  or  three  minutes 
to  find  the  information  he  needs.”  I 


UfUJlT’Q  “It’s  increasingly'  important 

u  for  organizations  to  cut  the 

,  Ma/iarka.  an  analyst  at  CAP  Ventures  Inc. 
in  Norwell,  Mass,  “Arbortext's  focus  on 

I!  SliSt  cost  and  time  ct  creating, 
rousing  and  shoring  infor¬ 

j  simplifying  the  development  and  usage 
of  such  applications  represents  the  next 

mation  while  delvering  mere  dynamic  con¬ 

.  logical  step  in  the  evolution  of  tech  notogy 

tent  on  more  types  of  media,”  says  Michael 

in  this  category,” 

BY  STEVE  ALEXANDER 

Hospitals  facing  new  government  re¬ 
quirements  for  privacy  of  patient  med¬ 
ical  records  are  looking  for  better  ways 
to  authenticate  users  of  their  networks. 

Antelope  Valley  Health  Care  Dis¬ 
trict,  which  operates  a  community  hos¬ 
pital  and  eight  medical  clinics  in  Lan¬ 
caster,  Calif.,  chose  fingerprint  identifi¬ 
cation  software  from  BioconX  Inc.  in 
Minneapolis. 

Ash  I.  Shehata,  director  of  informa¬ 
tion  systems  and  telecommunications 
at  Antelope  Valley,  says  the  BioconX 
network  security  software  “was  the 
only  application  we  could  find  that  let 
us  achieve  multiple  secure  log-ons  on 
a  single  workstation.”  Maintaining  sep¬ 
arate  security  for  multiple  users  on  each 
workstation  was  important  to  the  2,000- 
employee  health-care  organization 
because  improved  computer  security 
and  data  privacy  will  be  required  by 
the  Health  Insurance  Portability  and 
Accountability  Act  by  April  14,  2003. 

Shehata  says  he  found  fingerprint 
identification  using  mouse  readers  to 
be  more  secure  than  typed-in  pass¬ 
words  and  more  reliable  than  token- 
card  electronic  password  devices. 
“Users  forgot  to  bring  the  devices  to 
work.  But  it’s  hard  to  forget  to  bring 
your  finger,”  he  says. 

Equally  important,  the  BioconX  user 


identification  approach  was  affordable. 
That’s  partly  because  mouse  finger¬ 
print  readers  now  cost  about  $120  and 
partly  because  the  BioconX  product 
doesn’t  require  the  modification  of 
source  code  on  the  60  applications  to 
which  it  provides  authentication,  She¬ 
hata  says.  The  cost  per  user  is  $200, 
which  includes  the  BioconX  software, 
the  server  on  which  it  runs  and  the 
mouse  reader  from  Siemens  AG.  I 
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APPLICATION  DEVELOPMENT 

ClientSoft  Inc. 

LOCATION:  Miami 


URL:  www.dientsoft.eom 


FOUNDED:  1987 


TECHNOLOGY:  ClientSoft 
Tanit  Objects 

KEY  CUSTOMER:  Penn  Mutual  Life 

Insurance  Co. 

WHAT  IT  DOES:  A  development 
platform  and  runtime  environ¬ 
ment  for  IBM  CICS  integration 
that  allows  users  to  extend  core 
legacy  systems  to  modern  media 
such  as  browser-based  Internet 
applications. 


Metastorm  Inc. 

LOCATION:  Severna  Park,  Md. 


URL:  www.metastorm.com 


FOUNDED:  1996 


TECHNOLOGY:  E-work 


KEY  CUSTOMERS:  City  of 

Bakersfield,  Calif., 

McKenna  &  Cuneo  LLP 


WHAT  IT  DOES:  Application  inte¬ 
gration  software  that  automates 
people-intensive  and  paper-based 
tasks.  Flexible,  scalable  and  com¬ 
patible  with  legacy  systems. 


CUSTOMER  RELATIONSHIP 
MANAGEMENT 

Astute  Inc. 

LOCATION:  Columbus,  Ohio 


URL:  www.astutesolutions.com 


FOUNDED:  1996 

TECHNOLOGY:  PowerCenter 

KEY  CUSTOMERS:  McDonald’s 
Corp.,  L’Oreal  SA,  Levi 
Strauss  &  Co. 

WHAT  IT  DOES:  Provides  a 
one-to-one  consumer  response 
system  that  integrates  customer 
data  and  communication  chan¬ 
nels  to  improve  responsiveness 
of  customer  service  represen¬ 
tatives. 

Profiles  continue  on  page  30 


Guardian  NAS  Server  Family 


Guardian  4400  Server 


Guardian  14000  Server 


Quantum 


Drive  down  the  cost  of  workgroup  storage 
in  your  enterprise.  1U/640GB  for  $5,495! 

Once  again.  Quantum  raises  the  bar  for  Network  Attached  Storage.  Introducing  the 
Quantum  Guardian  4400  server.. .the  latest  addition  to  the  Guardian  line  of  enterprise  servers. 
The  Guardian  4400  server  offers  value,  performance  and  a  feature  set  unmatched  by  any  other 
1U  workgroup  server.  You'll  get  higher  data  availability  with  hot-swappable  disk  drives  and 
dual  Gigabit  Ethernet  connectivity.  Your  costs  will  be  lower  thanks  to  capabilities  like 
Snapshots,  local  tape  backup  via  SCSI'  port  and  Backup  Express™  for  Guardian  software  and 
fast,  easy  deployment  into  your  mixed  Windows,  Linux,  UNIX  and  Macintosh  environment. 

See  for  yourself  how  it  blows  the  competition  away  at  quantum.com/new440Q. 


•  Support  for  Windows,  UNIX,  Linux  and  Macintosh  Environments 

•  1 .44TB  Native  Capacity 

•  640GB  and  480GB 

•  Journaling  File  System 

•  Twelve  Front-loading, 

Native  Capacity 

Security/Management  •  Microsoft  ADS  •  UNIX  NIS  •  SNMP  •  SSL 

Hot-swappable  Disk  Drives 

•  Four  Front-loading, 

®  SSH  •  Kerberos  Authentication  (v5)  •  Quotas  for  Users/Groups 
*  File  and  Folder  Security  for  Users/Groups 

•  Redundant  (N  +  1)  Hot-swappable 

Hot-swappable  Disk  Drives 

Power  Supplies 

•  Maximum  Density  m  a 

Availability  •  Hot-swappable  Disk  Drives  •  Dual  Gigabit  Ethernet 
•  RAID  5, 1,  0  +  Hot  Spare 

•  Redundant  (N  +  1)  Hot-swappable 

1 U  Form  Factor 

Cooling  Fans 

•  Three-Year  Rapid  Exchange 

Data  Protection  •  Snapshot  Technology  •  Backup  Agent  Support 
•  Server-to-Server  Synchronization  Utility  •  Local  Tape  Backup  Support 

•  LCD  Management  Console 

Warranty 

‘PowerQuest  DataKeeper  (for  Windows  Client  Backup) 

*  APC  Smart-UPS  Support 

•  Standard  On-site  Support 

V 

J 

1 .888.343.7627  quantum.  com/new4400 


Think  of  the  new  Guardian™  4400  server 
as  your  trusty  Snap  Servers. on  steroids. 
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Mazu 

Networks  Inc. 

CATEGORY:  Security 

URL:  vvww.mazunetworks.com 

LOCATION:  Cambridge,  Mass. 

FOUNDED:  2000 

TECHNOLOGY:  Security  systems  to  prevent 
distributed  denial-of-service  (DDOS) 
attacks  based  on  fast  packet-processing 
technology 

KEY  CUSTOMERS:  MTV  Networks  (operates 
the  MTV,  VH-1  and  Nickelodeon  channels), 
New  York  Mercantile  Exchange  Inc. 

HOW  IT  WORKS:  Mazu’s  Enforcer  builds  a 
statistical  model  of  Web  site  traffic  when 
no  attack  is  occurring,  says  Carty  Castaldi, 
vice  president  of  engineering  at  the  com¬ 
pany.  During  a  DDOS  attack,  Enforcer 
identifies  data  packets  associated  with 
the  attack  based  on  their  statistical  differ¬ 
ences  from  the  norm  and  recommends 
a  filter  that  typically  blocks  80%  of  the 
attack  packets  and  about  5%  of  nonattack 
packets,  he  says. 

TIP:  Enforcer  is  good  but  not  foolproof.  It 
works  best  when  there  is  no  variation  in 
the  attacking  packets.  But  some  attackers 
switch  the  packet  types  midattack,  reduc¬ 
ing  Enforcer’s  effectiveness  until  it  can  re¬ 
analyze  the  situation  and  recommend  a 
different  filter.  The  more  varied  the  attack, 
the  less  effective  Enforcer  is. 


BY  STEVE  ALEXANDER 

MTV.com,  the  Web  site  for  the  cable 
TV  music  channel,  is  the  target  of 
DDOS  attacks  each  fall  when  the  MTV 
Video  Music  Awards  are  televised.  But 
the  attacks,  in  which  servers  are  delib¬ 
erately  overloaded  by  heavy  traffic,  are 
now  blunted  because  New  York-based 
MTV  Networks  is  protecting  its  15  en¬ 


tertainment  Web  sites  with  Enforcer, 
a  defensive  tool  from  Mazu  Networks 
Inc.  in  Cambridge,  Mass. 

“During  the  MTV  Awards  and  other 
highly  publicized  TV  events,  some 
folks  try  to  knock  us  out  of  the  water,” 
says  Brian  Amirian,  director  of  Web 
hosting  and  development  at  MTV 
Networks  Online  Technology.  So  last 
year,  MTV  attached  Mazu’s  Enforcer 
to  gigabit  uplinks  between  the  MTV 
Web  sites  and  the  company’s  Internet 
service  provider. 

Amirian  says  one  reason  he  selected 
Mazu’s  product  is  the  efficient  way  it 
uses  proprietary  hardware  to  filter  out 
DDOS  attacks.  Some  other  products 
that  he  evaluated  but  rejected  used 
software  that  relied  on  the  more  limit¬ 
ed  filtering  capabilities  of  existing  net¬ 
work  routers. 

According  to  Amirian’s  calculations, 
he  recouped  the  $32,000  investment 
in  Enforcer  within  about  two  months 
because  the  Mazu  device  kept  MTV’s 
Web  site  from  being  disrupted  during 
the  heavy  advertising  period  surround¬ 
ing  the  Video  Music  Awards.  > 


Alexander  is  a  freelance  writer  in 
Edina,  Minn.  You  can  contact  him 
at  sorion99@yahoo.com. 
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BRIAN  AMIRIAN,  director  of  Web  hosting  and  development  at  MTV  Networks  Online 
Technology,  says  Mazu’s  Enforcer  protected  his  site  from  denial-of-service  attacks. 

IBM 

CATEGORY:  Enterprise  systems 
URL:  www.ibm.com 
LOCATION:  Armonk,  N.Y. 

FOUNDED:  1911 

TECHNOLOGY:  Sametime,  the  first  instant 
messaging  and  e-meeting  technology 
built  specifically  for  corporations 

KEY  CUSTOMERS:  Shaw  Pittman  LLP  (a 
multinational  law  firm),  Ryder  System  Inc. 

HOW  IT  WORKS:  Sametime  provides 
secure  real-time  instant  messaging  capa¬ 
bilities  for  businesses  by  integrating  the 
software  directly  into  their  corporate 
networks.  Systems  administrators  have 
full  control  over  who  can  view  corporate 
information,  while  also  ensuring  that  only 
employees  can  send  messages  within  the 
system,  which  differs  from  free  instant 
messaging  software  such  as  Yahoo  Inc.'s 
Messenger. 

TIP:  Sametime  is  easy  to  install  but  must 
be  specially  configured  to  operate  through 
ports  in  corporate  firewalls. 


BY  TODD  R.  WEISS 

The  old  ways  of  communication  just 
weren’t  cutting  it  anymore  at  the  law 
firm  of  Beckman  &  Hirsch  PLC. 

Using  intercoms  and  internal  e-mail 
systems,  the  attorneys  and  staff  in  the 
10-person  Burlington,  Iowa-based  prac¬ 
tice  were  continually  having  to  halt  their 
meetings  with  clients  and  other  work  to 
talk  on  the  intercom  or  check  for  e-mail. 

But  that’s  all  changed  since  Beckman 
&  Hirsch  deployed  IBM’s  Lotus  Same¬ 
time,  a  corporate  instant  messaging  and 
electronic  meeting  application  that’s 
helping  the  firm  react  to  messages  and 
information  with  fewer  distractions. 

David  Beckman,  one  of  the  princi¬ 
pals  at  the  law  firm,  says  his  personal 
secretary  moved  to  another  town,  but 
that  hasn’t  created  a  ripple  in  how  they 
work  together.  “I  can  do  my  work  and 
never  realize  that  the  secretary  han¬ 
dling  this  is  100  miles  away,”  he  says. 

When  using  e-mail  or  intercoms, 
employees  have  to  stop  and  check  for 
messages  or  react  when  the  intercom 
sounds.  But  with  Sametime,  staff  mem¬ 
bers  can  quietly  and  efficiently  respond 
to  one  another  through  pop-up  mes¬ 
sages  on  their  computer  screens,  even 
while  they’re  on  the  phone,  increasing 
their  productivity  and  billable  hours. 


WHAT’S 

IN  STORE 


'■[Instant  messaging 
s]  definitely  becom- 
ing  infrastructure, 
but  it’s  what  you  do 
with  it  that  gives  you  bang  fur  the 
buck.  It  squeezes  cui  time  and  waste; 
Instant  messaging  s  going  to  become 
a  critical  part  of  that,"  says  Neil  Me- 
Donald,  an  analyst  at  Gartner  Inc.  in 
Stamford  Conn  Sametime  is  one  of 
the  most  visible  business  IM  products 
on  the.market  because  obits  inclusion. 


Also  available  are  collaboration  tools 
such  as  whiteboards  that  allow  people 
to  work  together  in  real  time. 

Beckman  says  Sametime  offers  major 
benefits  to  his  business,  such  as  secure 
communications  and  encryption  —  fea¬ 
tures  not  found  in  the  free  instant  mes¬ 
saging  applications  available  on  the  In¬ 
ternet,  including  Yahoo  Messenger  and 
America  Online  Inc.’s  Instant  Messen¬ 
ger.  “It  isn’t  just,  ‘Go  on  AOL  and  every¬ 
body  get  in  a  chat  room,’  ”  Beckman 
says.  “Particularly  in  the  legal  field, 
confidentiality  is  important.”  I 

Profiles  continue  on  page  32 


Supplier  Intelligence  | 


elligence  |  Customer  Intelligence  |  Intelligence  Architecture  |  Enterprise  Intelligence 


How  do  you  extract,  transform  and 
load  data  while  assuring  quality? 

Build  a  scalable  data  warehouse 
with  a  single  point  of  control? 

And  simplify  the  way  you  create 
and  customize  enterprise  reports? 
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77^  Power  to  Know m 


SAS  is  all  you  need  to  know. 


Only  SAS  provides  a  high-impact,  low-risk  way 
to  achieve  intelligent  data  warehousing.  You  can 
surface  information  from  any  source -corporate 
systems,  e-business  channels,  your  supply  chain 
and  beyond -across  any  platform.  And  deliver  a 
shared  version  of  the  truth  throughout  your 
enterprise.  To  find  out  how  top  companies  reap 
bottom-line  rewards  with  SAS  software,  call  toll  free 
1  866  270  5727  or  visit  www.sas.com/warehouse 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration.  ©  2002  SAS  Institute  Inc.  All  rights  reserved  5004SU$.0:02 
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Entercept 

Security 

technologies 

CATEGORY:  Security 
URL:  www.entercept.com 
LOCATION:  Raleigh,  N.C. 

FOUNDED:  1996 

TECHNOLOGY:  Entercept,  a  server  security 
system  that  uses  behavioral  rules  and  sig¬ 
natures  to  identify  anomalous  behavior 
and  block  attacks  in  real  time 

KEY  CUSTOMERS:  First  Citizens  Bank, 

Corio  Inc. 

HOW  IT  WORKS:  Entercept  provides  intru¬ 
sion-detection  and  prevention  software  for 
host  and  application  servers  and  will  soon 
expand  the  capability  to  database  servers. 
The  software  decides  whether  to  permit  a 
system  call  inside  a  server  based  on  the 
signature  of  the  call  or  behavior  rules.  For 
example,  if  a  hacker  were  seeking  a  pass¬ 
word  file  on  a  Web  server,  that  behavior 
would  be  contrary  to  the  normal  behavior 
of  someone  accessing  a  Web  page  and 
wouldn’t  be  allowed. 


TIP:  Be  aware  that  host-based  intrusion- 
prevention  software  must  be  installed  on 
every  server,  including  the  ones  IT  doesn’t 
know  about,  and  run  constantly. 

BY  MATT  HAMBLEN 

First  Citizens  Bank  in  Raleigh,  N.C., 
implemented  an  intrusion-detection 
system  from  Entercept  Security  Tech¬ 
nologies  just  in  time  back  in  March 
2000. 

The  Code  Red  worm  hit  three  days 
after  the  bank  installed  Entercept  on 
customer-related  Internet-facing 
servers,  and  the  Nimda  virus  hit  short¬ 
ly  after  that,  says  Jay  Ward,  senior  net¬ 
work  security  analyst  at  First  Citizens. 

“But  we  kept  humming  along  with¬ 
out  skipping  a  beat,  so  I’d  say  yes,  that 
was  a  definite  return  on  investment,” 
he  says.  “When  the  CIO  asked  me  why 
we  weren’t  hit  when  some  of  our 
peers’  internal  networks  were  down 
for  up  to  three  days,  I  told  him  it  was 
. . .  Entercept.” 

The  product  was  unique  at  the  time, 
blocking  malicious  attacks  near  the 
kernel  level,  Ward  says.  But  analysts 
say  Entercept  now  faces  competitors 
such  as  Okena  Inc.  in  Waltham,  Mass., 
and  Harris  Corp.  in  Melbourne,  Fla. 


One  big  advantage  Entercept  offered 
First  Citizens  is  that  it  gave  administra¬ 
tors  time  to  thoroughly  test  patches 
and  then  apply  them.  Some  vendors 
had  told  the  bank  they  couldn’t  sup¬ 
port  the  servers  if  the  patches  were  in¬ 
stalled  by  bank  officials,  and  First  Citi¬ 
zens  decided  that  waiting  for  the  ven¬ 
dors  to  install  the  systems  would  take 
too  long,  Ward  says. 

Because  host-based  intrusion-pre¬ 
vention  software  must  be  installed  on 
every  server,  it  can  be  very  expensive, 
notes  Gartner  Inc.  analyst  John  Pesca- 
tore.  But  a  $1,595  Entercept  Web  server 
provides  such  good  protection  that  it’s 
worth  the  price,  Ward  says.  I 
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in  the  category  o.f 

INSTORE  host-based  intrusfo 

protection  sqftwafe 
and  services,  which,  will  soon  be  offet 
by  big  systems  management  vendors 
such  as  Tivoli  Software  Group.  Compt 
er  Associates  International  Inc,  and 
BMC  Software  Inc.  These  companies 


Cyclone 

Commerce 

Inc. 

CATEGORY:  E-commerce 

URL:  www.cyclonecommerce.com 

LOCATION:  Scottsdale,  Ariz. 

FOUNDED:  1996 

TECHNOLOGY:  Provides  secure,  profile- 
based,  easy-to-configure  Web  connections 
to  trading  partners 

KEY  CUSTOMERS:  Do  It  Best  Corp., 
Allegiance  Healthcare 

HOW  IT  'WORKS:  Cyclone’s  software  offers  a 
quick,  easy  and  secure  way  for  companies 
to  connect  via  the  Internet  to  their  trading 
partners,  regardless  of  their  preferences 
for  data  type,  communication  protocols  or 
security  infrastructure.  The  Java-based 
software  relies  on  a  profile-driven  inter¬ 
face  to  run  connections  to  internal  appli¬ 
cations  and  other  software,  to  enable  traf¬ 
fic  to  travel  back  and  forth  seamiessly. 

TIP:  Users  should  be  aware  of  hidden 
costs.  For  instance,  their  partners  may  not 
be  able  to  afford  to  link  up  using  the  re¬ 
quired  client  software. 


BY  MARC  L.  SONGINI 

Companies  looking  to  auto¬ 
mate  their  supply  chain  con¬ 
nections  are  faced  with  the 
daunting  task  of  integrating 
their  enterprise  resource  plan¬ 
ning  and  other  related  systems 
with  partners.  Problem  is, 
those  partners  often  use  a 
wide  variety  of  communica¬ 
tions  protocols  and  other  technologies, 
such  as  electronic  data  interchange 
(EDI),  frame  relay  and  others.  Invest¬ 
ing  in  a  private  communications  linkup 
can  prove  extremely  expensive  and 
time-consuming. 

Enter  Cyclone  Commerce,  which 
offers  software  that  stores  profiles  of 
different  partners  and  their  technolo¬ 
gies  and  can  route  data  to  the  appro¬ 
priate  personnel  and  applications  in  a 
company. 

At  San  Francisco-based  McKesson 


Corp.,  a  health  care  distribu¬ 
tion  company,  there  was  a 
need  to  manage  the  large 
amounts  of  traffic  moving  be¬ 
tween  it  and  its  customers, 
some  of  whom  were  huge  re¬ 
tail  chains  requiring  very  ro¬ 
bust  interfaces.  Each  time  a 
new  customer  was  added, 
McKesson  had  to  hand-code  a 
new  interface. 

Paul  Fowler,  vice  president  of  e-busi¬ 
ness  solutions  at  McKesson,  says  that 
two  years  ago,  the  firm  installed  Cy¬ 
clone’s  Central  product.  “It  is  essen¬ 
tially  a  connector  that  allows  us  to 
quickly  configure  connectivity  to  other 
people’s  financial  systems  and  orders. 
We  consider  it  a  data  switch,”  says 
Fowler. 

McKesson  can  now  add  partners  on 
the  fly,  without  the  time  and  expense 
of  hand-coding,  he  adds.  I 


WHAT’S 

The  market  for  software 
to  automate  connections 

Web,  XML  and  other  related  technologies, 
there  are  more  avenues  available  that  let  com¬ 

INSTORE 

between  trading  partners 
is  in  transition,  says  Jon 

panies  to  do  more  types  of  collaboration.  Cy¬ 
clone  not  only  helps  enable  this,  but  it  also 

DeRome,  an  ana 

ilyst  at  The  Yankee  Group  in 

provides  an  audit  trail  -  if  one  partner  sends 

Boston.  For  decades,  partners  communicated 

another  a  purchase  order,  there  is  a  record  of 

primarily  via  EDI. 

.  Now,  with  the  advent  of  the 

it,  says  DeRome. 

HONORABLE  MENTIONS 


DATA  MANAGEMENT 

eXcelon  Corp. 

LOCATION:  Burlington,  Mass. 

URL:  www.exceloncorp.com 
FOUNDED:  2001 
TECHNOLOGY:  XIS 

KEY  CUSTOMERS:  Amazon.com 
Inc.,  NTT  DoCoMo 

WHAT  IT  DOES:  An  XML  database 
management  system  that 
solves  integration  problems  for 
enterprise-grade  applications. 

NETWORKING 

Fortinet  Inc. 

LOCATION:  Santa  Clara,  Calif. 

URL:  www.fortinet.com 
FOUNDED:  2000 

TECHNOLOGY:  Fortigate  network 
protection  gateways 

KEY  CUSTOMER:  Agile  Software 
Corp. 

WHAT  IT  DOES:  Protects  against 
network-borne  threats.  Supports 
network-based  deployment  of  ap¬ 
plication-level  services. 

Foundry 
Networks  Inc. 

LOCATION:  San  Jose 

URL:  www.foundrynetworks.com 

FOUNDED:  1996 

TECHNOLOGY:  10-Gigabit 
Ethernet  802.3ae 

KEY  CUSTOMER:  University  of 
Southern  California 

WHAT  IT  DOES:  Delivers  10-Gigabit 
services  to  connect  backbone 
switches/routers,  simplifying 
network  connectivity. 

SECURITY 

Ultra-Scan  Corp. 

LOCATION:  Amherst,  N.Y. 

URL:  www.ultra-scan.com 
FOUNDED:  1986 

TECHNOLOGY:  Ultrasonic 
fingerprint  identification  system 

KEY  CUSTOMER:  ATESA,  a  Chilean 
HMO  consortium 

WHAT  IT  DOES:  Checks  fingerprints 

against  a  database. 

Profiles  continue  on  page  34 
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storage  software  company. 
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Stratify  Inc. 

CATEGORY:  Data  management 
URL:  www.stratify.com 
LOCATION:  Mountain  View,  Calif. 

FOUNDED:  1999 

TECHNOLOGY:  Stratify  Discovery  System, 
software  that  automates  the  organization 
and  classification  of  unstructured  data 

KEY  CUSTOMERS:  Bell  Canada,  U.S. 
Department  of  Education 

HOW  IT  WORKS:  Stratify’s  software  will 
comb  through  the  millions  of  documents  in 
an  enterprise,  look  at  patterns  in  the 
words,  sort  them  into  various  groups,  and 
allow  a  company  to  create  a  portal  that 
could  be  similar  to  Yahoo  Inc.’s  search 
structure,  with  data  presented  in  hierar¬ 
chical  fashion,  as  well  as  provide  tools  to 
extract  data.  It  can  also  tie  in  relevant  data 
from  the  Internet.  Says  Chief  Technology 
Officer  Ramana  Venkata,  “Knowledge  is 
power.  If  you  don’t  know  what  you  got,  you 
don’t  have  it  -  you  don’t  have  power.” 

TIP:  Stratify’s  system  has  the  ability  to 
reach  deep  into  a  system,  including  a 
user’s  e-mails.  End  users  need  to  address 
access  policy  issues. 

BY  PATRICK  THIBODEAU 

The  hundreds,  or  perhaps  many  thou¬ 
sands,  of  e-mail  messages,  Web  pages, 
documents,  PowerPoint  presentations 
and  other  text  files  stored  on  your  lap¬ 
top  hard  drive  are  called  unstructured 
data.  They’re  not  filed  well,  and  key¬ 
word  searches  are  often  frustrating. 

Now  imagine  that  same  problem 
across  an  enterprise,  with  millions  of 
text  documents,  the  accumulated 
knowledge  of  your  company,  stored  in 
thousands  of  servers.  It’s  a  much  big¬ 
ger  mess. 

One  company  that’s  dealing  with 
large  volumes  of  similarly  unstruc- 


EB I 

ture  fund  backed  by  the  CIA.  has  in 


This  is  a  market  in 
its  beginning  stages, 
but  interest  is  grow¬ 
ing.  In-Q-Tel,  a  ven- 


vested  in  Stratify.  One  appealing  fea¬ 
ture  of  Stratify  is  that  ft  doesn't  rely  on 
any  one  technology  but  will  use  pat¬ 
tern  recognition,  language  analysis 
;i  and  systems  that  look  at  how  words 
%  and  patterns  differ,  says  Bill  Lange,  an 
’  analyst  at  Delphi  Group  in  Boston. 
“Enterprise  organizations  know  they 
''  have,  a  problem,  but  they  don’t  know 

how  to  go  about  solving  it,"  he  says. 
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tured  data  is  NewsEdge  Corp.  in 
Burlington,  Mass.,  a  content  provider 
for  business  Web  sites.  It  turned  to 
knowledge  management  company 
Stratify  Inc.  to  help  it  process  the  tens 
of  thousands  of  news  stories,  press  re¬ 
leases  and  other  material  that  it  re¬ 
ceives  daily. 

NewsEdge’s  problem  is  ensuring  it 
catches  everything.  Editors  read  sto¬ 
ries,  look  for  new  trends  and  technolo¬ 
gies  and  write  system  rules  to  catch  fu¬ 
ture  references.  The  data  is  then  put  in 
the  appropriate  category  or  taxonomy. 


But  with  so  much  information  flowing 
in  “it  just  quickly  gets  out  of  hand,” 
says  Steve  Samler,  architect  of  content. 

NewsEdge  picked  Stratify  because  it 
wanted  a  system  that  had  the  ability  to 
learn,  discover  new  topics,  write  rules 
and  incorporate  those  findings  in 
NewsEdge’s  own  taxonomy.  And  unlike 
some  other  knowledge  management 
vendors  that  wanted  to  completely  au¬ 
tomate  the  system,  Stratify’s  system 
was  flexible  enough  to  ensure  human 
intervention.  There’s  no  substitute  for 
human  judgment,  says  Samler.  ft 


Terabeam 

Corp. 

CATEGORY:  Wireless 
URL:  www.terabeam.com 
LOCATION:  Kirkland,  Wash. 

FOUNDED:  1997 

TECHNOLOGY:  Fiberless  optics,  which  beam 
the  same  light  used  in  fiber  optic  cables 
through  the  air  -  straight  through  office 
windows 

KEY  CUSTOMERS:  Overlake  Hospital  Med¬ 
ical  Center,  Fisher  Communications  (TV 
and  radio  stations) 

HOW  IT  WORKS:  Terabeam’s  Free  Space 
Optical  Technology  uses  lasers  operating 
at  1,550  nanometers,  far  above  visible 
light,  eliminating  the  possibility  of  eye 
damage  caused  by  other  lasers.  It  uses 
computer-controlled  steering  mirrors  to 
ensure  tight  beams.  Its  range  is  about  800 
feet  to  three  miles  depending  on  the 
weather.  The  company  offers  two  models: 
Elliptica,  which  has  a  throughput  of  155M 
bit/sec.,  and  Magna,  which  has  throughput 
of  1G  bit/sec. 

TIP:  Free  space  optical  communications 
systems  don’t  have  the  security  holes 
found  in  wireless  bridges,  but  users  should 
be  aware  that  they  work  best  in  locations 
with  little  rain  or  fog,  which  can  cut 
throughput  or  completely  block  a  signal. 

BY  BOB  BREWIN 

Running  a  high-end  hotel  in  a  technol¬ 
ogy  hub  such  as  Seattle  requires  giving 
road  warriors  more  than  just  a  room. 
Visitors  to  nearby  Microsoft  Corp.  and 
other  high-tech  companies  such  as 
RealNetworks  Inc.  expect  high-band- 
width  Internet  connections. 

Satisfying  the  wideband  thirst  of  a 
guest  population  that  varies  from  day 
to  day  in  a  hotel  with  more  than  400 
rooms  is  a  challenge,  but  one  that  the 


WHAT’S 

INSTORE 


Elliott  Grand  Hyatt  Hotel  in  downtown 
Seattle  has  met  with  a  flexible  band¬ 
width  service  from  Terabeam,  says  the 
hotel’s  general  manager,  Doug  Sears. 

If  Sears  anticipates  greater  than  nor¬ 
mal  demand  for  high-bandwidth  con¬ 
nection  to  guest  rooms  or  the  hotel’s 
auditorium  —  which  has  each  of  its  160 
seats  equipped  with  an  Ethernet  jack 
—  all  he  has  to  do  is  order  up  more 
bandwidth  from  Terabeam.  Terabeam, 
which  manufactures  free-space  optical 
systems  and  also  serves  as  a  local  car¬ 
rier  in  Seattle,  has  mounted  a  dish  on 
the  hotel’s  roof,  which  uses  free  space 
optical  telecommunications  technolo¬ 
gy  to  hook  into  the  hub  of  a  major 
telecommunications  carrier  about  800 
feet  from  the  hotel. 

Lou  Gellos,  a  Terabeam  spokesman, 
declines  to  identify  the  carrier,  but  did 
say  the  arrangement  allows  Terabeam 
to  boost  the  Elliot  Grand’s  capacity  at  a 
flick  of  a  switch  from  5  to  100  mega¬ 
bits.  That’s  important,  Sears  says, 
when  a  large  number  of  guests  check 
in  expecting  high-speed  connections  at 
the  same  time,  such  as  during  a  Real¬ 
Networks  conference  earlier  this  year. 

Gellos  says  Terabeam’s  free  space 
optic  technology  (fiber  without  the 
wires)  makes  tying  a  hotel  into  a  high¬ 
speed  hub  easy,  since  it  doesn’t  require 
digging  up  the  street.  Installing  a  dish 
on  the  roof  does  the  job.  ft 


HONORABLE  MENTIONS 


Waveset 

Technologies  Inc. 

LOCATION:  Austin,  Texas 
URL:  www.waveset.com 
FOUNDED:  2000 


TECHNOLOGY:  Waveset  Lighthouse 


KEY  CUSTOMERS:  GMAC  Financial 
Services,  the  American  Red 
Cross,  Burlington  Northern  Santa 

Fe  Railway  Corp. 


WHAT  IT  DOES:  Automates  security 
provisioning  of  business  informa¬ 
tion  systems  across  enterprise,  in¬ 
tranet  and  extranet  environments. 


SUPPLY  CHAIN/ERP 

Formation 
Systems  Inc. 

LOCATION:  Southboro,  Mass. 

URL:  www.formationsystems.com 
FOUNDED:  1995 


TECHNOLOGY:  Gptiva 

KEY  CUSTOMERS:  The  Coca-Cola 
Co.,  Mrs.  Smith’s  Bakeries  LLC 

WHAT  IT  DOES:  Collaboration  soft¬ 
ware  automates  product  develop¬ 
ment  and  commercialization, 
reducing  the  time  and  resources 
required  to  take  a  product  from 
idea  through  product  launch. 


WIRELESS 

Air2Web  Inc. 

LOCATION:  Atlanta 
URL:  www.air2web.com 


FOUNDED:  1999 

TECHNOLOGY:  Mobile  Internet 
Platform,  a  wireless  application 
gateway 

KEY  CUSTOMERS:  ADC 

Telecommunications  Inc., 

United  Parcel  Service  Inc. 

WHAT  IT  DOES:  Extends  corporate 
data,  back-end  information  sys¬ 
tems,  e-mail  and  Web  site 
content  to  mobile  users. 

Profiles  continue  on  page  36 


Protecting  data.  Storing  data.  Sharing  data.  From  notebooks  to 
networks ,  Iomega  takes  care  of  critical  business  data,  so  you  can 
concentrate  on  critical  weekend  plans. 


■  V'fci- 


Check  out  the  fast,  new  Zip  750mb  storage  solution  and  sign 
up  for  a  chance  to  win  a  Microsoft®  Xbox™  and  other  cool 
products  in  the  $2500  Technology  Shopping  Spree!  To  enter, 
visit  http:/ /go.iomega. com/04 


We  live  in  a  world  o 
Protect  yours. 
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MetraTech 

Corp. 

CATEGORY:  Enterprise  systems 
URL:  www.metratech.com 
LOCATION:  Waltham,  Mass. 

FOUNDED:  1998 

TECHNOLOGY:  MetraNet,  a  Web  ser- 
vices-based  billing  system  that  uses 
XML  technology 

KEY  CUSTOMERS:  BCE  (subsidiary  of  Bell 
Canada),  British  Telecom  Conferencing 

HOW  IT  WORKS:  The  MetraNet  billing 
platform  enables  communications  ser¬ 
vice  providers  to  dynamically  offer  new 
services  and  package  existing  services 
in  new  ways.  Customers  can  integrate 
the  system  with  their  existing  infra¬ 
structure  and  third-party  applications 
and  provide  pricing,  revenue  sharing 
and  billing  capabilities  using  XML  and 
plug-and-play  Web  services. 

TIP:  According  to  Jim  Culbert,  vice  pres¬ 
ident  of  technology  at  MetraTech,  there 
are  some  standard  requirements  for  the 
system,  like  processor  level.  “When  we 
engage  with  a  customer,  we  have  a  fair¬ 
ly  detailed  set  of  business  process  we 
go  through,”  says  Culbert.  “We  first  fig¬ 
ure  out  what  they’re  doing  from  a  busi¬ 
ness  perspective.” 

BY  THOMAS  HOFFMAN 

ACT  Teleconferencing  Inc.  is  a 
prime  example  of  how  MetraTech 
Corp.’s  MetraNet  Web-based  billing 
and  revenue  sharing  system  is  help¬ 
ing  companies  solve  business  prob¬ 
lems  and  cut  costs. 

In  late  1999,  the  Golden,  Colo.- 
based  provider  of  audio,  video,  data 
and  Internet  conferencing  products 
and  services  began  building  a  home¬ 
grown  billing  system  to  help  it  sup¬ 
port  its  20  domestic  and  internation¬ 
al  call  centers,  many  of  which  had 
been  picked  up  through  acquisitions. 
Problem  was,  these  call  centers  ran 
disparate  billing  systems  that 
weren’t  well  integrated.  ACT  execu¬ 
tives  decided  at  the  time  to  go  with  a 
“build  vs.  buy”  approach  to  creating 
a  single,  standardized  billing 
system  because  there  didn’t 
appear  to  be  any  third-party 
billing  systems  on  the  mar¬ 
ket  that  could  meet  its  needs 
and  support  multiple  lan¬ 
guages. 

Teleconferencing  and 
videoconferencing  “is  a  dif¬ 
ficult  business  to  build”  be¬ 
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cause  billing  isn’t  simply  a  matter  of 
multiplying  minutes  times  price.  It 
involves  a  combination  of  tiered  ser¬ 
vices  purchased,  such  as  having  a 
“live”  operator  on  a  conference  call 
or  a  Web  stream  attached  to  a  con¬ 
ference,  says  ACT  Chief  Technology 
Officer  Mark  Kelly,  who  works  out 
of  the  company’s  Ottawa  office. 

Enter  MetraTech.  After  a  Metra¬ 
Tech  representative  contacted  ACT 
about  its  MetraNet  system,  the  con¬ 
ferencing  services  provider  quickly 
saw  the  benefits  that  the  XML-dri- 
ven  billing  system  could  deliver. 

Since  installing  the  MetraNet  sys¬ 
tem,  ACT  has  been  able  to  shrink  its 
billing  cycles  from  30  days  to  one 
day  and  receive  payments  from  cus¬ 
tomers  20  to  40  days  faster  than  be¬ 
fore.  In  addition,  ACT  has  saved  “a 
couple  of  million  dollars  a  year” 
through  improved  billing  accuracy, 
eliminating  rebilling  and  having  a 
smaller  support  staff  to  maintain  a 
single  billing  system,  says  Kelly.  He 
estimates  that  the  MetraNet  system 
paid  for  itself  in  18  to  24  months. 

“If  it  typically  takes  45  to  60  days 
to  render  invoices,  then  you’re  es¬ 
sentially  funding  customers  for  that 
time  and  impacting  your  cash  flow,” 
says  Kelly.  “The  more  you  compress 
and  shrink  that  billing  cycle,  the 
[more]  free  cash  you  generate.” 

“We  recommend  that  customers 
have  a  good  understanding 
of  how  XML  fits  into  their 
overall  IT  strategy,  say  in 
document  management  or 
in  B2B  supply  chain  areas,” 
says  MetraTech’s  Jim  Cul¬ 
bert.  “If  the  customer  isn’t 
up  to  speed  on  that,  we  have 
a  professional  services  arm 
that  helps  out  as  well.”  I 


Software  AG 

CATEGORY:  Data  management 
URL:  www.softwareag.com 
LOCATION:  Reston,  Va. 

FOUNDED:  1969 

TECHNOLOGY:  Tamino  XML  Server,  an 
XML  server  for  Internet  database  man¬ 
agement.  Processes  XML  documents 
natively 

KEY  CUSTOMERS:  DaimlerChrysler  AG, 

Virginia  Polytechnic  Institute  and  State 
University 

HOW  IT  WORKS:  Tamino  XML  Server 
makes  storing,  processing  and  retriev¬ 
ing  XML  data  easier  and  faster 
compared  with  traditional  rela¬ 
tional  database  management 
systems  where  XML  data  has  to 
be  modified  and  reconstructed 
every  time  it  is  stored  or  re¬ 
trieved.  “Tamino  is  high-perfor¬ 
mance  native  XML  server  for 
storing  and  publishing  XML  doc¬ 
ument  in  support  of  e-business 
applications,”  says  Karen  Deda, 
a  product  manager  at  Software  AG. 

TIP:  As  with  any  database,  modeling 
your  data  to  represent  relationships 
among  elements  is  a  key  aspect  of  the 
planning  process. 

BY  JAIKUMAR  VIJAYAN 

As  a  company  focused  on  special¬ 
ized  distribution  and  logistics  ser¬ 
vices,  NorthAmerican  Logistics  has 
been  a  longtime  user  of  electronic 
data  interchange  (EDI)  for  exchang¬ 
ing  different  types  of  data  between 
its  networks  and  those  of  its  cus¬ 
tomers  and  supply  chain  partners. 

But  all  that  is  starting  to  change. 
Under  increased  pressure  from 
some  of  its  high-technology  cus¬ 
tomers  and  in  a  bid  to  reduce  the 
traditional  value-added  network 
(VAN)  translator  costs  that  are  asso¬ 


ciated  with  EDI,  NorthAmerican  Lo¬ 
gistics  has  recently  started  using 
XML  for  its  business-to-business 
data  exchange. 

This  Web-based  approach  aligns 
NorthAmerican  Logistics’  capabili¬ 
ties  more  closely  with  those  of  its 
partners,  says  CIO  Ann  M.  Harten. 
And  it  offers  the  logistics  provider, 
which  is  a  service  of  Fort  Wayne, 
Ind.-based  North  American  Van 
Lines  Inc.,  a  relatively  easier  way  to 
exchange  different  types  of  data 
than  EDI  does,  while  making  the 
data  exchange  process  faster  and 
more  efficient. 

The  company  won’t  completely 
abandon  EDI  anytime  soon.  But  in 
each  of  the  next  three  years, 
Harten  says  she  expects  that 
NorthAmerican  Logistics 
will  move  at  least  10%  of  its 
EDI  traffic  over  to  XML. 

The  goal,  she  says,  is  to 
eliminate  at  least  $40,000, 
or  13%,  from  the  $300,000 
the  company  spends  cur¬ 
rently  on  VAN  costs  each 
year. 

Playing  a  central  role  in  this  trans¬ 
formation  is  Tamino  XML  Server,  a 
native  XML  database  from  Software 
AG.  The  database  allows 
NorthAmerican  Logistics  to  store 
and  process  XML  documents  native¬ 
ly  without  any  transformation. 

In  traditional  relational  database 
management  systems,  XML  data  has 
to  be  modified  and  reconstructed 
each  time  it’s  stored  or  retrieved,  ac¬ 
cording  to  Software  AG’s  Karen 
Deda.  Tamino  XML  Server  makes 
that  process  faster. 

This  makes  it  a  good  technology 
for  applications  where  reliable  and 
fast  exchange  of  XML  data  is  impor¬ 
tant,  she  says. 

Tamino  was  first  out  of  the  blocks 
and  is  the  current  market  leader,  but 
vendors  like  Ixia  Soft  Inc.  and  Neo- 
Core  offer  similar  products.  I 
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Introducing  the  Dell/EMC  SAN  solution. 
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Undeniable  performance. 
Unbelievable  savings. 
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Dell  j  EMC  Storage  Solutions 


Affordable,  reliable  Dell/EMC  SAN  solutions 


Consolidating  with  Dell/EMC  drives  down  costs  across  the  board. 

When  it  comes  to  storage  consolidation,  what  does  Dell/EMC  bring  to  your  enterprise?  Just  what  you'd  expect:  A  legendary 
focus  on  you,  the  customer,  that's  as  relentless  as  our  focus  on  driving  down  costs.  A  Dell/EMC  end-to-end  SAN  solution 
can  save  you  money  today  and  tomorrow  by  delivering: 

®  A  measurable  cost  advantage.  A  full  range  of  enterprise-level  SAN  storage  options  including  new  modular 
configurations  starting  as  low  as  90/megabyte. 

«  High  availability.  Dell/EMC  SAN  solutions  deliver  ease  of  management,  high-level  performance  and  interoperability 
to  meet  the  needs  of  your  organization,  today  and  tomorrow. 

®  Storage  consolidation  services.  Our  comprehensive  portfolio  includes  SAN  consolidation  readiness  assessment, 
consolidation  design  and  transformation,  customer  training  and  certification,  SAN  implementation  and  high  availability 
support  services. 

«  Optimized  uptime/maximized  investment.  New  systems  management  solutions  deploy  software,  tools  and 
services  which  simplify  and  automate  storage  systems  administration.  Leveraging  your  IT  resources  and  maximizing 
your  IT  dollar. 

«  Flexible  financing  alternatives.  Dell/EMC  gives  you  a  variety  of  financing  avenues  designed  to  help  you  optimize  ROI 


For  nearly  20  years,  we've  revolutionized  the  way  the  world  buys  and  manages  technology.  Now  find 
out  how  Dell's  direct  approach  can  revolutionize  your  storage  consolidation.  Take  the  Dell  ROI  test  at 

A  www.dell.com/sanROI  or  call  us  toll-free  at  1-877-435-DELL 


Flexible  solutions  that  can  cut  costs  today  and  tomorrow.  Easy  as 
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Call  1-877-435-DELL  or  visit  www.dell.com/sanROI 
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TECHNOLOGY 


Attack  on  Feds:  It 
Came  From  Within 

Who  is  running  port  scans  of  federal  intelli¬ 
gence  computers  from  the  corporate  LAN? 

A  system  alert  leads  to  a  wake-up  call  -  and 
some  anxious  moments.  By  Vince  Tuesday 


MY  SECURITY  TEAM 

was  recently  asked  to 
help  reduce  costs  by 
consolidating  after- 
hours  security  and  IT  support 
services.  We  had  been  charg¬ 
ing  a  nightly  fee  for  round-the- 
clock  on-call  support,  but  the 
company  reasons  that  it’s 
cheaper  to  consolidate  all  first- 
line  support  to  the  on-call  IT 
team  that  supports 
our  applications. 

I  trained  the  on-call 
team,  covering  the 
most  common  prob¬ 
lems  and  what  to  do 
if  there’s  a  situation 
they  can’t  handle.  My 
security  team  now  offers  sec¬ 
ond-line  support. 

The  alerting  system  is  well 
tuned,  and  we  don’t  get  many 
after-hours  alarms,  so  I  doubt¬ 
ed  we’d  be  called  often.  I  was 
wrong. 

At  3  a.m.  on  the  first  night 
the  IT  team  took  over,  I  re¬ 
ceived  a  call  from  a  rather 
worried  on-call  guy  who  had 
been  paged  with  an  “ISS” 
alert.  He  didn’t  know  that  ISS 
just  stands  for  Internet  Securi¬ 
ty  Systems  Inc.,  the  Atlanta- 
based  vendor  of  our  intrusion- 
detection  software. 

One  of  the  many  things  we 
can  detect  is  probes  sent  from 
ISS’s  Internet  Scanner  soft¬ 
ware.  The  scanner  lets  admin¬ 
istrators  check  their  networks 
for  vulnerabilities,  but  attack¬ 
ers  can  also  misuse  it  to  map 
our  networks  and  identify 
weaknesses.  ISS  tries  to  pre¬ 
vent  this  by  using  a  complicat¬ 
ed  licensing  process  that  lim¬ 
its  the  IP  addresses  each  tool 
can  attack.  It  also  sends  some 
special  packets  at  the  begin¬ 
ning  of  each  scan,  including 


the  license  key,  the  user  name, 
and  the  host  and  domain  of 
the  scanning  machine.  That 
way,  if  someone  uses  the  tool 
to  scan  a  network  they  don’t 
own,  the  product  will  an¬ 
nounce  who  they  are. 

We  monitor  for  these  pack¬ 
ets  in  case  somebody  finds  a 
way,  using  network  address 
translation  perhaps,  to  trick 
the  scanner  into 
thinking  it’s  probing 
a  local  machine 
when  in  fact  it’s 
scanning  us. 

More  worrisome 
is  that,  as  with  other 
digital  rights  man¬ 
agement  systems,  hackers 
claim  to  have  broken  ISS’s 
license  key  system.  In  fact, 
key-generation  software  can 
be  found  on  the  Web  to  make 
keys  for  any  network. 

The  fake  license  keys  these 
tools  generate  typically  have 
an  ID  of  1234.  So  even  if  the 
special  packets  contain  the 
hacked  ID,  you  have  very  little 
to  go  on.  We  could  also  expect 
the  attacker’s  IP  address  to 
be  faked. 

The  normal  response  to  an 
ISS  alert,  we  told  the  new  sup¬ 
port  team,  is  to  trace  down  the 


We  had  detected  an 
attack  against  the  DIA, 
the  heart  of  the  U.S. 
intelligence  services, 
that  came  from  our 
own  network. 


source  of  the  attack  via  the 
America  Registry  for  Internet 
Numbers  (ARIN)  Web  site  at 
www.arin.net  and  notify  the 
attacker’s  Internet  service 
provider.  We  even  have  stan¬ 
dard  forms  for  those  submis¬ 
sions.  We  don’t  really  expect 
the  ISP  to  do  anything,  but  at 
least  we  try. 

Internal  Attack 

But  the  detail  that  worried 
the  front-line  support  chap, 
and  that  made  me  snap  awake 
at  that  awful  hour,  was  the 
source  of  the  attack:  It  came 
from  within  our  own  network. 

Maybe  someone  we’d  hired 
was  a  bit  of  a  hacker.  Or  may¬ 
be  the  system  had  it  wrong 
and  the  attacker  was  actually 
the  target. 

I  asked  the  support  techni¬ 
cian  for  the  target  address  of 
the  probes.  It  was  the  IP  ad¬ 
dress  11.1.1.3,  which  seemed 
rather  odd.  The  address  range 
10.x.x.x  is  reserved  so  compa¬ 
nies  can  use  it  internally,  as  we 
do.  So  perhaps  this  was  a  typo? 
Who  was  ll.x.x.x?  After  a  quick 
check  of  ARIN,  my  blood  ran 
cold.  The  results  read: 

DOD  Intel  Information 

Systems  (NET-DODIIS) 

Defense  Intelligence  Agency 

Washington,  D.C. 

We  had  detected  an  attack 
against  the  DIA,  the  heart  of 
the  U.S.  intelligence  services, 
that  came  from  our  own  net¬ 
work  —  and  I  doubted  that  we 
were  the  only  people  to  spot 
this.  No  doubt  somewhere  in 
Washington  someone  was  also 
being  woken  to  respond. 

Whoops.  We  had  to  work 
out  what  was  going  on  before 
men  in  trench  coats  and  dark 
glasses  arrived.  I  took  control 
of  the  call  and  began  searching 
for  the  internal  machine. 

I  traced  the  machine  to  one 
of  our  Unix  server  clusters.  It 
seemed  to  be  the  one  running 


our  enterprise  monitoring  sys¬ 
tem  (EMS).  That  didn’t  make 
sense  —  ISS  stopped  making 
Unix  versions  of  Internet 
Scanner  a  long  time  ago.  If  a 
hacker  could  get  hold  of  a  li¬ 
cense  generator,  why  would  he 
make  keys  for  an  old  version? 
The  Unix  version  of  Internet 
Scanner  was  five  years  old,  so 
the  problems  it  might  look  for 
would  have  been  fixed  by  now, 
making  it  useless. 

The  Mix-up 

Then  a  few  pieces  fell  into 
place.  The  EMS  pings  every 
interface  on  every  router  we 
have  to  make  sure  each  is  re¬ 
sponding  correctly,  and  the 
ISS  special  packets  use  the 
same  protocol  as  ping.  Per¬ 
haps  there  had  been  some 
kind  of  mix-up?  Could  the 
EMS,  by  chance,  have  sent  an 
ISS  alarm  packet? 

I  woke  the  network  team 
and  got  them  to  check  the 
configuration.  Aha!  We  were 
monitoring  the  11.1.1.3  address. 
It  seems  someone  had  mis¬ 
typed  what  should  have  been 
a  10-x.x.x  address. 

So  our  EMS  was  accidental¬ 
ly  trying  to  manage  the  DIA’s 
network  devices.  But  was  it 
also  the  unwitting  host  of  a 
hacked  version  of  Internet 
Scanner?  We  could  find  no 
evidence  of  any  such  tools  on 
the  machine.  It  seemed  much 
more  likely  that  the  “attack” 
was  just  an  odd  packet.  But 
with  no  record  of  the  packet 
from  our  intrusion-detection 
system,  we  faced  a  choice:  We 
could  either  ask  the  DIA  if 
they  had  a  copy,  or  we  could 
keep  our  heads  down. 

We’re  keeping  our  heads 
down.  I’ve  updated  the  fire¬ 
wall  to  block  any  attempts  for 
the  EMS  to  talk  outward,  and 
hopefully  that’s  the  end  of  it. 
That  is,  unless  the  feds  come 
knocking.  I 

WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real 
security  manager,  “Vince  Tuesday,”  whose 
name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  him  at  vince. 
tuesday@hushmail.com,  or  join  the  dis¬ 
cussion  in  our  forum: 

QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager’s  Journals,  go  online  to 

©  computerworld.com/secjournal 
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SMS  Authentication 

RSA  Security  Inc.  in  Bedford, 
Mass.,  has  announced  RSA 
Mobile,  software  that  provides 
one-time  access  codes  at  the 
time  of  iog-in  to  mobile  de¬ 
vices  via  Short  Messaging 
Service  (SMS).  By  entering  a 
user  ID  and  a  personal  identifi¬ 
cation  number  followed  by  the 
access  code,  users  can  access 
the  desired  Web  applications. 
The  two-way  authentication 
system  is  meant  to  provide 
secure  remote  access  while 
lowering  administrative  costs 
and  making  use  of  existing 
mobile  devices. 


Security  Pays 


Average  annual  compensa¬ 
tion,  by  security  job  title: 

DIRECTOR,  SECURITY _ 


8124,513 


MANAGER.  SECURITY 


$107,812 


WEB  SECURITY  MANAGER 


895,936 


SENIOR  SECURITY  ANALYST 


889,048 


SOURCE:  SURVEY  OF  1.245  SECURITY 
EXECUTIVES.  Q1  2002,  FOOTE  PART¬ 
NERS  LLC.  NEW  CANAAN.  CONN. 


Bracing  for 
Bluetooth 


Because  much  of  the  Blue¬ 
tooth  wireless  security  model 
is  optional,  network  executives 
should  start  setting  policies  for 
handling  the  short-range  radio 
technology,  according  to  new 
research  from  Gartner  Inc. 
Gartner’s  recommendations 
include  the  following: 

■  Require  link-level  securi¬ 
ty  to  be  active  in  all  Bluetooth 
devices. 

■  Use  application-level 
security:  Point-to-Point  Tun¬ 
neling  Protocol,  Secure  Sock¬ 
ets  Layer  or  a  virtual  private 
network. 

■  Make  employees  aware 
of  the  risks,  encourage  good 
user  security  practices,  and 
configure  devices  properly. 

■  Evaluate  a  product’s  user 
interface  to  decide  how  easily 
it  lets  users  set  up  and  manage 
security. 
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35  Years  of 

IT  Leadership 

On  September  30th,  Computerworld  celebrates  35  years  of  reporting  on  the  Information 
Technology  evolution  by  showcasing  the  people,  projects  and  companies  that  have 
shaped  the  industry. 

In  the  issue,  Computerworld  will  laud  35  innovative  technologies  and  applications  that  have  impacted 
business  practices  since  1967  and  celebrate  the  greatest  technology  successes  of  the  past  three  decades. 

In  addition,  Computerworld  will  talk  with  the  IT  movers  and  shakers  about  where  IT  is  headed  as  the 
industry  continues  to  evolve. 

This  collectors  edition  issue  will  also  feature  a  multipage  timeline  to  guide  readers  and  Web  site 
visitors  through  significant  technology  events  from  1967  to  2002.  The  timeline  will  document  key 
dates  and  developments  in  the  IT  industry,  from  the  early  stages  of  the  technology  revolution  to  the 
latest  in  cutting-edge  innovations. 

Join  us  next  week  for  a  stroll  through  history  and  look  forward,  with  us,  toward  history  to  be  made. 


GORDON  SANJAY  VINTON  G.  CARLY  STEVE  GORDON  BOB  SCOTT  MICHAEL 
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SYMPOSIUM 


ENTERPRISE  ARCHITECTURES  FOR  SECURITY 


Never  has  the  need  for  security  been  so  great  Never  has  it  been 
so  hard  for  management  to  understand  the  requirements  and 
allocate  the  necessary  resources  to  safeguard  the  organization. 
This  symposium  aims  to  bring  technology  experts  and  managers 
together  to  mutually  explore  the  issues  and  best  approaches  to 
protect  the  information  and  physical  assets  of  the  organization. 

Highlights  include: 

•  A  day  tutorial  providing  an  overview  of  security  technologies 

•  A  presentation  of  the  OCTAVE  security  risk  assessment 
approach  developed  recently  by  researchers  at  the  CERT 
Coordination  Center  of  Carnegie  Mellon’s  Software  Engineering 
Institute  (SEI). 

•  A  White  Paper  by  the  Information  Civil  Defense  Task  Force 
(ICDTF)  a  nation-wide  group  of  CIO’s  that  was  formed  in  the 
wake  of  September  1 1  to  ensure  that  business  is  better  able  to 
cope  with  internal  and  external  security  threats. 

•  A  panel  of  Chief  Security  Officers  will  discuss  security  issues  in 
the  financial  services  industry. 

•  Exhibits  by  leading  security  vendors. 


KEYNOTE  SPEAKERS 

Sallie  McDonald 

is  Assistant  Commissioner  for 
the  Office  of  Information 
Assurance  and  Critical 
Infrastructure  Protection  in  the 
Federal  Technology  Service  in 
the  General  Services 
Administration  (GSA). 

Yalkin  Demirkaya 

has  fifteen  years  of  law  enforce¬ 
ment  experience  as  a  detective 
as  well  as  a  detective  squad 
commander.  He  is  the  founder 
and  currently  the  Commanding 
Officer  of  the  Computer  Crimes 
Investigation  Unit  of  one  of  the 
largest  law  enforcement  organi¬ 
zations  in  the  world. 


INFORMATION 
&  REGISTRATION 

Melissa  Vinch 

Tel  201-216-5550 

fax  201-216-5385 

email:  mvinch@stevens-tech.edu 

http://attila.stevens-tech.edu 

MOT  SYMPOSIUM  2002 

Howe  School  of  Technology 
Management 

Stevens  Institute  of  Technology 
Castle  Point  on  the  Hudson 
Hoboken,  NJ  07030,  USA 


SSIs 


Register  online  at 

http://attila.  stevens-tech.edu/motsymposium 


STEVENS 


Institute  of  Technology 


■  ■ 


COMPUTERWORLD  September  23, 2002 


MANAGEMENT 


THIS  WEEK 


WHY  SWITCH  TO  LINUX? 

Linux  may  be  free,  but  that’s  not 
what  makes  it  cost-effective, 
say  experienced  users  of  the  oper¬ 
ating  system.  Faster  processing, 
smoother  scalability  and  stream¬ 
lined  administration  and  systems 
maintenance  are  among  the 
advantages.  PAGE  42 


ERIC  GOLDFARB/PEER  TO  PEERS 

Answer  the  Call 

WE’VE  ALL  HEARD  THE  COME-ONS.  “Hello!  This  is  easy 

money.”  Right.  No  CIO  or  IT  manager  can  afford  to  sit 
waiting  for  profitability  to  call.  We  are  living  in  an  ex¬ 
tended  recession  contaminated  with  the  likes  of  Enron, 
Arthur  Andersen  and  WorldCom.  The  wake-up  call  we 
need  to  hear  and  heed  is  “Adapt  or  fail.” 


SINGING  FOR 
THEMSELVES 

IT  prima  donnas  are  arrogant. 
They  lack  social  skills,  and  they 
suck  up  untold  hours  of  manage¬ 
ment  time.  But  master  the  right 
techniques  for  managing  these  tal¬ 
ented  technical  professionals,  and 
they  may  become  some  of  your 
best  employees.  PAGE  46 


ANGST-FREE  FEEDBACK 

Shelving  the 
pass/fail  ap¬ 
proach  to  per¬ 
formance  re¬ 
views  and  feed¬ 
back  sessions 
can  yield  posi- 
|  tive  results,  but 

I  jt  takes  fore¬ 

thought  and  practice,  says  Jean- 
Francois  Manzoni  (above),  a  pro¬ 
fessor  of  management  featured 
in  this  month’s  Harvard  Business 
Review.  PAGE  48 


WORKSTYLES 

After  the  separation  from  Hoechst, 
Celanese  AG  is  working  to  central¬ 
ize  IT  and  keep  the  culture  lively 
and  informal.  PAGE  50 


CAREER  ADVISER 

Fran  Quittel  counsels  a  telecom¬ 
munications  systems  engineer 
and  a  veteran  Unix  systems  admin¬ 
istrator.  PAGE  50 


Companies’  survival  and  recovery  depends  on  adjust¬ 
ing  to  the  ever-changing  business  environment.  Unfor¬ 
tunately,  the  harsh  reality  of  today’s  marketplace  is  that 
as  companies  struggle  with  declining  sales  and  profits 
and  bloated  costs,  IT  and  other  employees  will  continue 
to  be  laid  off.  Others  will  Find  themselves  in  dead-end 
jobs.  Loyalty,  seniority  and  entitlement  are  employment 
precepts  from  the  past  that  no  longer  apply.  IT  employ¬ 
ees  in  particular  need  to  find  ways  to  make  themselves 
continually  more  valuable,  thereby  making  their  compa¬ 
nies  more  productive,  efficient  and  profitable. 

Despite  the  sluggish  economy  and  job  market,  the  fu¬ 
ture  of  worldwide  business  isn’t  hopeless  to  those  work¬ 
ers  who  evolve  with  the  times.  The  message  is  clear:  Up¬ 
grade  your  skills  and  stay  flexible.  Be  willing  to  take  on 
tasks  and  tackle  goals  outside  of  your  day-to-day  job.  If 
you’re  an  applications  programmer,  consider  a  new  de¬ 
velopment  area.  If  you’re  a  LAN  administrator  and  your 
group  needs  help  with  Web  applications,  learn  the  ap¬ 
propriate  new  skills  and  apply  them.  What’s  needed  is 
for  every  person  in  IT  to  grab  a  shovel  and  start  digging. 

Companies  that  survive  this  downturn  can’t  afford  to 
retain  the  employee  who  deletes  or  ignores  this  critical 
message.  For  those  who  listen,  here  are  some  specific 
ways  to  increase  your  own  effectiveness  and  enhance 
your  value  to  your  company,  its  profits  and  productivity: 

■  Take  off  your  blinders.  Overcome  denial  and  self- 
deception  about  the  invincibility  of  your  career  or  your 
company.  You  need  to  see  clearly  where  your  company 
is  going  and  how  IT  fits  into  its  business  strategy.  If  your 
company  is  putting  a  lot  of  time  into  cash  management, 
look  for  ways  to  enhance  systems  to  provide 
tighter  financial  control  and  better  forecast¬ 
ing.  If  the  focus  is  on  improving  the  customer 
experience,  look  for  ways  to  apply  IT  to  that 
goal.  The  bottom  line  is  that  IT  and  business 
must  be  aligned. 

■  Determine  the  scope  of  your  company’s 
business,  its  IT  needs  and  how  your  IT  de¬ 
partment  is  mapping  to  those  requirements. 

Only  then  can  you  determine  how  IT  can  and 
should  fit  in.  Don’t  try  to  be  all  things  to  all 
customers.  Resources  are  scarce.  Set  reason¬ 
able  goals  and  expectations  for  problems, 
and  solve  what  you  can  within  the  IT  budget. 

■  Restructure  and  renegotiate  contracts  to 


reduce  financial  and  performance  drags  on  the  IT  de¬ 
partment.  Closely  review  service  agreements  with  out¬ 
sourcers.  Determine  what  is  wasteful  or  overkill.  Could 
you  live  with  98%  vs.  99.9%  uptime  for  an  application? 

■  Get  a  handle  on  cash  management.  Pull  the  plug  on 
any  IT  activity  that  is  losing  money  or  not  making  it. 

■  Commit  to  your  role.  Although  the  workforce  has 
shrunk,  your  task  hasn’t;  your  company  will  continue  to 
expect  more  from  you.  I,  for  one,  have  been  asked  to 
take  on  operational  and  financial  functions  that  don’t  fit 
the  traditional  CIO  job  description. 

■  Abide  by  the  golden  rule.  Given  the  recent  account¬ 
ing  scandals,  each  of  us  could  use  a  reminder  of  its  val¬ 
ue.  In  any  business,  it’s  all  about  trust,  and  when  trust  is 
breached,  profit  suffers. 

■  Satisfy  your  customers,  and  document  the  results. 
Customer/user  satisfaction  is  a  key  source  of  job  securi¬ 
ty.  If  you’re  on  the  help  desk,  publicize  positive  results 
and  find  what  the  help  desk  can  do  to  improve  more. 

■  Contribute  more  to  your  company  than  it  costs  to 
employ  you.  Working  hard  and  doing  good  work  aren’t 
enough;  you  get  an  A  for  expanding  your  skills. 

It’s  all  about  increasing  the  value  you  bring  to  an  orga¬ 
nization.  Since  your  expertise  is  your  ticket  to  success, 
take  responsibility  for  continuing  your  education  and  in¬ 
creasing  your  knowledge.  Invest  in  yourself.  Don’t  ex¬ 
pect  your  company  to  pay  for  training  as  it  may  have 
once  done.  You  are  in  charge  of  your  career. 

Ongoing  improvement  is  the  one  commonality  that 
surfaces  when  studying  corporations  that  have  emerged 
successfully  through  multiple  business  cycles.  Compa¬ 
nies  that  invest  in  training  come  out  ahead.  In 
a  study  of  more  than  3,100  U.S.  workplaces, 
the  National  Center  on  the  Educational  Quali¬ 
ty  of  the  Workforce  found  that  on  average,  a 
10%  increase  in  the  workforce  education  level 
led  to  an  8.6%  gain  in  total  productivity.  On 
the  other  hand,  a  10%  increase  in  new  equip¬ 
ment  spending  improved  productivity  by 
only  3.4%. 

Put  stock  in  yourself,  and  never  stop  devel¬ 
oping  skills  that  will  enhance  the  value  you 
bring  to  your  business.  That  value,  if  greater 
than  your  cost,  will  keep  you  employed  and 
marketable.  The  result  will  be  a  company  that 
emerges  as  a  long-term  winner.  I 


ERIC  60LDFARB  is  CIO 

at  Global  Knowledge, 
a  provider  of  IT  educa¬ 
tion  training  and  certifi¬ 
cation  programs. 
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It’s  power, 
speed  and 
simplicity 
that  drive 
Linux  ROI. 
By  Connie 
Winkler 

FREE  MAY  BE  ONE  of  technology  man¬ 
agers’  favorite  words,  but  it  typically 
figures  minimally  —  if  at  all  —  into 
ROI  calculations  for  switching  to  the 
Linux  operating  system.  Many  compa¬ 
nies  that  have  made  the  switch  to  Lin¬ 
ux  rank  its  zero  price  tag  as  relatively 
low  on  their  lists  of  key  ROI  factors. 
Instead,  what  counts  most  are: 

■  Reduced  hardware  costs  —  by  as 
much  as  90%  in  some  cases. 

■  Faster  processing  and  smoother  seal- 
ability,  which  translate  to  ever-faster 
online  responses  and  easier  computing 

upgrades  to  support  new 
or  more  customers  and  ap¬ 
plications. 

■  Streamlined  administra¬ 
tion  and  systems  maintenance,  which 
work  to  lower  labor  costs,  usually  by 
about  one-third. 

■  A  flexible,  lean-and-mean  technology 
infrastructure  that  ensures  the  compa¬ 
ny  will  be  competitive  in  the  future. 

Continued  on  page  44 


totcfiH 


irfleixrts 


fauns 


I  /  ConnvMuiU 

!;  $ys  Jems' 

B  /  c«mnVJ<Vt  Systems  Me. 

Is^Ss? 

PI  soMtore  that  ensure  me 

PI  reb»«v  «v*k&&y  01 

Itf  ixts^ss  Cfl*c«i  dat* »y 
■  *»**■'" 

■  aware  cKKkje  maTageree™ 

|  soUicrs,  CcrusVeut  provides 

\  is  users  wft  It*  no#  _ 

I  amxtrxnsn*  lie  system  and 
IdassoaseWW*^ 

I  recovery,  pastes  recovery 
f  h*»«rsft>:«  storage 
iwnegemert.  «r<*w«8  *r» 
'cBSaisaraeon 

O  Product  Wo  j 

O  Request  Wo  j 


rtmerits 


.-■■  .  sar* 

5?c'3?W' ''  ■■  Mi 


«  - 


Look  Here  First 


To  Find  Vendors 


' 


iilk 


gp  m  “> 

.»  5lvWl»r^.-.  •  erf.'  ' 


s#w=& 


Fast. 


Now  there’s  one  convenient  place  where 
you  can  go  to  quickly  find  the  vendors 
you  need  to  do  your  job  - 
computerworld.com/bg. 


Home 


■  SS0i££J 


Buyer 


’s  Gw 


{tssssxss^ 


This  comprehensive  online  directory 
makes  it  easy  to  identify  all  the  players 
that  are  doing  cutting-edge  work  in  secu¬ 
rity,  storage,  supply  chain,  CRM,  ERP, 
mobile/wireless,  networking  and  more. 


So  no  matter  what  technology  challenge 
you’re  facing,  you’ll  be  able  to  locate  the 
vendors  that  can  help  you  face  it. 
Computerworld’s  Buyer’s  Guides  deliver 
them  all:  Vendors  that  can  plan  IT,  imple¬ 
ment  IT,  test  IT,  support  IT. 
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Continued  from  page  42 

“Everyone  says  Linux  is  a  free  operating  system 
and  that’s  why  you’re  making  the  choice,  but  that 
isn’t  the  primary  driver,”  insists  Brad  H.  Friedman, 
vice  president  of  information  systems  at  Burlington 
Coat  Factory  Warehouse  Corp.  in  Burlington,  N.J. 

The  real  advantage  is  the  much  lower  cost  of  Intel 
hardware  on  which  Linux  and  its  applications  can 
run  efficiently  —  and  cheaply,  he  says.  Burlington,  a 
longtime  Unix  user,  is  currently  installing  its  second 
Linux  system. 

Chicago-based  Orbitz  Inc.  is  also  sold  on  the  cost 
savings  and  enhanced  processing  power  and  speed 
afforded  by  the  Linux/Intel  combination.  This 
month,  the  transaction-intensive  online  travel  reser¬ 
vation  company  is  going  a  step  further  with  Linux  by 
replacing  its  50  Sun  Microsystems  Inc.  Java  applica¬ 
tion  servers  running  Solaris  software.  These  heavy¬ 
lifting  systems  feed  the  company’s  700  Web  servers 
—  already  running  Linux  —  which  dish  up 
the  screens  customers  interact  with  when 
they  make  airline,  hotel  and  vacation 
reservations  online. 

This  summer,  Orbitz  benchmarked  sev¬ 
eral  vendors’  latest  hardware  systems,  in¬ 
cluding  Linux  on  commodity  Intel  boxes, 
and  the  results  were  compelling. 

“To  maintain  the  same  capacity  in  terms 
of  the  number  of  users  on  our  site,  we  were 
able  to  move  [from  the  Java  servers]  to  the  commodi¬ 
ty  [Intel  systems]  for  about  one-tenth  the  cost,”  says 
Roger  Liew,  vice  president  of  technology  development. 

“We  also  increased  the  speed  in  moving  into  a 
more  efficient  hardware  and  software  environment,” 
adds  Liew,  referring  to  the  faster  response  times  of 
the  Intel  environment.  Sun’s  latest  hardware  also  de¬ 
livered  the  higher  speed,  he  says,  but  the  scalability 
wasn’t  as  great.  With  Linux,  in  contrast,  doubling  the 
number  of  Linux  boxes  doubles  the  system  capacity. 

As  for  the  Web  servers,  Liew  especially  appreciates 
Linux’s  ease  of  maintenance,  which  requires  a  single 
administrator  for  the  700  machines.  “Everything  is 
automated.  It’s  probably  one  of  the  most  reliable  as¬ 
pects  of  our  system,”  he  says.  Increasing  system  ca¬ 
pacity  is  as  simple  as  taking  the  Intel/Linux  servers 
out  of  the  box,  putting  them  onto  racks,  powering 
them  up,  and  running  start-up  scripts,  Liew  says. 

A  Linux  Leap  of  Faith 

For  Neenah,  Wis.-based  Menasha  Corp.,  a  $1  bil¬ 
lion  packaging  company,  moving  its  SAP  AG  soft¬ 
ware  applications  from  a  mix  of  Unisys  Corp.  and 
Hewlett-Packard  Co.  systems  to  115  Linux-based  Dell 
Computer  Corp.  servers  was  a  leap  of  faith. 

“We  didn’t  know  it  [in  2001],  but  we  know  it  now,” 
says  Ed  Wojciechowski,  Menasha’s  CIO  and  presi¬ 
dent  of  Menasha  Advantage,  an  in-house,  for-profit 
IT  company  set  up  to  provide  enterprise  resource 
planning  applications  to  the  firm’s  five  packaging 
subsidiaries.  “We  projected  cost  savings  in  the  5%  to 
10%  range.  As  we  look  now,  our  Linux  deployment  is 
saving  us  20%  on  hardware  alone.” 

He  says  he  has  found  another  5%  in  soft  cost  sav¬ 
ings  associated  with  ongoing  operations,  such  as  not 
having  to  support  a  bloated  software  product  that 
had  unused  features  and  required  complex  mainte¬ 
nance.  Previously,  Menasha’s  bundled  proprietary 


operating  system  software  had  lots  of  capabilities 
that  the  company  didn’t  use  but  still  had  to  support 
to  keep  the  software  running  and  to  comply  with 
vendors’  requirements. 

ROI  has  also  come  from  the  240  Web  portals  the 
firm  launched  in  2000.  They  enable  customers  such 
as  food  makers  and  consumer  product  manufactur¬ 
ers  to  work  tightly  with  Menasha  in  the  tricky  collab¬ 
orative  packaging-design  process.  “We’re  getting 
about  2%  in  additional  sales,  or  $20  million,  through 
our  [package  design]  e-commerce  business,”  notes 
Wojciechowski,  whose  IT  staff  totals  115  people. 
“Today,  if  you  hold  your  own,  you  are  actually  gain¬ 
ing  market  share.” 

But  for  Menasha,  and  for  other  Linux  users,  the 
operating  system  is  about  more  than  dollars.  Woj¬ 
ciechowski  emphasizes  what  he  calls  the  agility  of 
Dell’s  Linux/Intel  architecture.  Menasha  now  buys 
highly  specific  software,  as  opposed  to  big,  propri¬ 
etary  bundles.  On  the  hardware  front, 
the  agility  enables  Menasha  to  expand  its 
server  farm  incrementally,  application  by 
application,  or  on  a  volume-by-volume 
basis.  “We  bought  what  we  needed, 
which  we  felt  was  a  great  way  to  manage 
our  infrastructure,”  says  Wojciechowski. 

Burlington  Coat  Factory  recently 
switched  its  PC-based  in-store  manage¬ 
ment  system  to  Linux,  resulting  in  a 
20%  ROI  improvement  compared  with  running 
Microsoft  Windows  licenses  on  the  five  PCs  in  each 
of  the  national  retailer’s  350  stores.  “To  administer 
that  many  [Windows]  PCs  would  be  a  gargantuan 
task,”  says  Friedman.  “With  Linux,  the  administration 
is  minimized.” 

Now  the  discount  retailer  is  replacing  4,500  to 
5,000  in-store  point-of-sale  terminals  from  NCR 
Corp.  with  ones  from  Austin,  Texas-based  Wincor 
Nixdorf  Inc.  that  run  Linux  applications  from 
Raleigh,  N.C.-based  Red  Flat  Inc.  On  both  hardware 
and  software,  Burlington  expects  20%  to  25%  savings. 
And  the  decision  to  replace  the  terminals  was  as 
much  about  the  NCR  gear  being  15  years  old  as  it  was 
about  the  advantages  of  Linux,  says  Friedman. 

Virtually  all  the  Linux  users  interviewed  said  they 
value  Linux  as  a  path  to  the  future  and  not  just  for 
the  open  technology  itself. 

In  Pasadena,  Calif.,  Parsons  Corp.,  a  large  engi¬ 
neering  and  construction  firm  with  $2.5  billion  in 
revenue  and  10,000  Windows  PCs,  is  evaluating  mov¬ 
ing  its  approximately  300  servers  running  1,000  dif¬ 
ferent  applications  to  Linux  or  Unix  by  late  2004, 
when  its  contract  with  Microsoft  Corp.  expires. 

And  what  about  on  the  desktop?  Right  now  that’s  a 
tough  decision,  because  those  10,000  PCs  worldwide 
are  running  complex  engineering  applications.  But  it 
will  be  a  no-brainer  in  a  couple  of  years,  predicts 
CIO  John  Thomas. 

“We  think  by  2004,  there’s  not  going  to  be  a  lot  of 
choice  out  there,”  says  Thomas,  adding  that  by  then, 
the  strong  ROI  generated  by  Linux  on  Intel  systems 
will  be  common  knowledge,  making  it  the  obvious  and 
most  compelling  technology  option  for  the  future.  I 


Winkler,  a  former  Computerworld  New  York  bureau 
chief,  writes  in  Seattle  about  the  management  of  tech¬ 
nology.  Contact  her  at  cwinkler@drizzle.com. 


MAKE  MINE  A 
MAINFRAME 

Read  how  Linux  on  big  iron 
can  cut  costs  and  reduce 
administration  headaches: 

O  QuickLink  32647 
www.computerworld.com 
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MISSING 

PIECES 

The  Linux  operating  system  is  not 
without  its  downside.  Here  are  a 
few  factors  to  consider  before 
making  a  switch. 

1. 

For  many  business  and  engineer¬ 
ing  applications,  Linux  software 
just  doesn't  exist.  Burlington  Coat 
Factory,  for  example,  is  still  waiting  for 
a  capable  word  processing  application 
that  more  closely  matches  Microsoft 
Word.  And  Parsons  has  found  very  little 
Linux-ready  engineering  software  to 
handle  its  complex,  distributed  engi¬ 
neering  requirements. 

2. 

Because  it’s  oniy  about  10  years  old, 

Linux  is  still  unfamiliar  to  many  ijlrofes- 
sionals.  ^^p^^ware  cross-train¬ 
ing  their  employees  on  Linux. 

3a 

The  lean  and  sleek  design  of  the 
Linux  operating  system  makes  it 
better  suited  to  some  tasks  than 
others.  Internet/intranet/extranet 
systems,  Web  serv||||nd  high-volume 
systems,  such  as  those  used  in  financial 
services  and  Hollywood  filmmaking, 
shine  on  Linux. 

4. 

As  Linux  becomes  increasingly 
popular  with  large  companies, 

there’s  concern  over  the  operating  sys¬ 
tem  splintering  into  multiple  incompati¬ 
ble  versions,  which  occurred  with  Unix 
during  the  1980s. 

5. 

The  fact  that  Linux  is  fed  and  main¬ 
tained  by  volinteer  programmers 
around  the  world  -  the  open-source 
community  -  scares  some  IT  depart¬ 
ments.  One  vendor  famously  labeled  it  a 
“bathtub  of  code"  with  too  many  cooks. 

-  Connie  Winkler 
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CIO  GETS 

UNEXPECTED  PRAISE 


BOY  BAND  SINGS 
UNEXPECTED  HIT 


(e)  business  is  the  game.  Play  to  win. 


1  ]  WIN  WITH  SELF-MANAGEMENT:  Whether  it’s  boy  bands  or  rubber 
bands,  software  that  effectively  manages  an  e-business  is  essential.  But 
software  that  corrects  problems  before  they  occur? That’s  extraordinary. 


2]  WIN  WITH  TIVOLI:  Unlike  other  solutions  that  tell  you  you’ve  violated 
a  service  level  agreement  after  the  fact,  Tivoli  software  detects 
trends  and  makes  adjustments  before  things  go  awry.  Tivoli.  Part  of  our 
software  portfolio,  including  DB2?  Lotus®  and  WebSphere® 


3]  MAKE  THE  PLAY:  Visit  ibm.com/tivoli/unexpected  and  download 
a  free  buyer’s  guide  on  how  to  meet  your  service  level  agreements. 


]||  software 

SELF 

HEALING 

PLAY 


MANAGEMENT 
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While  IT’S  not  unusual  for  an  em¬ 
ployee  to  think  some  customers 
are  stupid,  few  say  so  to  customers 
directly.  But  Vivek  Wadhwa,  CEO 
of  Relativity  Technologies  Inc.  in 
Cary,  N.C.,  has  twice  had  to  apologize  during  the  past 
few  years  to  customers  who  have  endured  develop¬ 
ers  calling  them  “stupid”  right  to  their  face. 

What  kind  of  employees  would  do  that?  IT  prima 
donnas.  They’re  smart,  they’re  skilled,  they’re  opin¬ 
ionated,  they’re  arrogant.  And,  yes,  they’re  frequently 
even  right.  But  are  they  really  worth  the  management 
headaches  and  morale  problems  they  can  cause? 

Greg  Walton,  CIO  of  Carilion  Health  System,  a 
$658  million  Roanoke,  Va.-based  health  care  com¬ 
pany,  defines  prima  donnas  as  “big  brains”  with 
stronger  intellects  and  stronger  egos  than  other 
workers.  “They  tend  to  operate  on  a  different  plane, 
see  problems  differently,  see  solutions  differently,” 
he  says,  adding  that  those  qualities  make  such  em¬ 
ployees  worthwhile. 

But  treating  prima  donnas  like  other  employees 
is  a  mistake,  notes  Walton.  Instead,  he  says,  master 
the  techniques  for  managing  them,  and  they  may 
become  some  of  your  best  employees. 

Gene  Bedell,  CEO  of  Engenia  Software  Inc.,  a  man¬ 


agement  software  company  in  Reston,  Va.,  tells  the 
story  of  a  brilliant  technical  person  who  couldn’t  get 
along  with  people,  said  whatever  was  on  his  mind, 
and  didn’t  suffer  fools  gladly.  “We  cleared  the  ground 
around  him,”  says  Bedell,  referring  to  limiting  the 
employee’s  interactions  with  others.  “We  wouldn’t 
let  him  manage  anyone.  We  told  others  to  give  him 
some  slack.  And  we  gave  him  a  lot  of  coaching.” 

Eventually,  this  prima  donna  learned  how  to  be  a 
team  player  and  was  made  a  manager.  Bedell  was 
able  to  benefit  from  the  prima  donna’s  technical  abil¬ 
ities,  while  the  employee  worked  on  his  social  skills. 

Garrett  Granger,  CIO  at  pencil  manufacturer 
Dixon  Ticonderoga  Co.  in  Heathrow,  Fla.,  gives  the 
following  advice  for  managing  IT  prima  donnas: 

■  Give  them  the  personal  attention  and  feedback 
they  demand  and  require. 

■  Be  diplomatic.  Prima  donnas  often  react  quickly 
—  and  negatively  —  to  criticism,  which  they  take  as 
an  affront  to  their  abilities.  Granger  is  direct  when 
giving  criticism  but  takes  the  edge  off  by  saying, 
“Don’t  take  this  wrong,  but . . 

■  Steer  them  in  the  right  direction.  Prima  donnas 
are  prone  to  going  off  on  tangents  because  they  think 
they  have  the  better  solution.  Granger  addresses  this 
by  putting  them  on  projects  that  require  teamwork. 
“When  they  have  to  work  on  common  things,  it 
slows  down  the  prima  donna’s  ability  to  branch  off 
on  tangents  [and]  tempers  their  arrogance,”  he  says. 

Giving  the  prima  donna  more  of  your  personal 
time,  seeking  his  advice  on  IT  projects  and  issues 
and  letting  him  in  on  future  projects  earlier  than 
others  also  help  to  fill  the  prima  donna’s  need  for 
special  treatment,  says  Walton.  But  don’t  single  him 
out  too  much,  or  you  risk  alienating  others  on  the 
team,  he  cautions.  Still,  a  little  special  treatment  goes 
a  long  way. 

Prima  donnas  frequently  cause  morale  problems 
by  belittling  others.  Dan  Bent,  CIO  at  Benefit  Sys¬ 
tems  Inc.,  a  third-party  Indianapolis-based  adminis¬ 
trator  of  employee  benefits,  stifles  this  by  pointing 
out  to  the  prima  donna  that  it’s  other  workers  who 
do  many  of  the  repetitive  tasks  the  prima  donna 
would  never  want  to  do.  Bent  says  he  works  with  the 
prima  donna  so  long  as  the  benefits  outweigh  the 
negatives.  He  says  he  cuts  the  cord  “when  the  behav¬ 
ior  offsets  the  person’s  effectiveness  —  when  they’re 
more  trouble  than  they’re  worth.” 

Wadhwa  says  he  fences  off  prima  donnas  and  “puts 


SINGING  FC  ’ 
THEMSELVES 

Howto  tone  down  IT  prima  donnas  to 
enhance  staff  harmony  and  productivity. 

BY  ALAN  S.  HOROWITZ 


WORTH 
YOUR  WHILE? 

The  following  are  a  few  factors  to  con¬ 
sider  when  dealing  with  a  prima  donna: 

NOT  ALL  PRIMA 
DONNAS  ARE  THE  SAME. 

Some  have  annoying  personalities  but 
remarkable  technical  abilities,  while  others 
go  off  on  their  own  and  provide  minimal 
benefit  to  the  organization. 


HOW  HIGH  IS  YOUR  OWN 
TOLERANCE  LEVEL? 

As  a  manager,  do  high-maintenance 
employees  bother  you  or  provide  you 
with  a  desirable  challenge? 


WHAT’S  YOUR  ORGANIZA¬ 
TION’S  CULTURE? 

A  company  with  a  button-down 
corporate  culture  will  have  more  difficulty 
benefiting  from  a  prima  donna  than  a 
company  with  a  more  freewheeling  culture. 


them  in  their  own  world.”  They’re  worth  doing  this 
for  because  they  are  so  good  at  what  they  do.  But 
that’s  assuming  the  worker  fits  Wadhwa’s  definition 
of  the  prima  donna  who’s  a  genius. 

There  are  plenty  of  IT  managers,  though,  who  say 
prima  donnas  are  so  disruptive  that  no  amount  of  tal¬ 
ent  can  compensate  for  the  problems  they  cause  and 
the  disproportionate  amount  of  management  time 
they  require.  “I  would  sacrifice  someone  who  was 
enormously  talented  if  they  continue  to  be  a  prima 
donna,”  says  Tom  Lewis,  chairman  and  CEO  of  Salt 
Lake  City-based  Campus  Pipeline  Inc.,  which  provides 
technology  services  to  colleges  and  universities. 

The  image  of  a  man  who  claimed  he  could  produce 
better  software  code  than  anyone  on  the  team  is  still 
vivid  after  25  years  to  Jon  Dell’Antonia,  CIO  at  chil¬ 
dren’s  clothing  manufacturer  OshKosh  B’Gosh  Inc. 
in  Oshkosh,  Wis.  Recalls  Dell’Antonia,  “The  guy  was 
an  incredible  talent,  [but]  he  was  such  a  disruptive 
force.  He  would  berate  others.  We  had  to  let  him  go.” 

The  bottom-line  question  for  managers  is  how  to 
know  when  to  let  a  prima  donna  go.  The  answer: 
When  the  employee  is  costing  you  more  than  he  is 
delivering,  managers  say.  You  can  see  this  in  terms 
of  lost  team  morale  and  antagonized  customers,  or 
when  projects  go  off  course  and  cost  more  or  take 
longer  than  they  should.  All  are  sure  signs  that  it’s 
time  to  cut  the  cord.  ) 


Horowitz  is  a  freelance  business  and  technology 
writer  in  Salt  Lake  City. 


WHEN  ENOUGH  IS  ENOUGH 


Go  online  for  the  sure  signs  it’s  time  to  cut  the  cord  on  your  IT  prima  donna: 


OQuickLink  32926 

www.computerworld.com 


REP  SAVES  TIME 
(STUDYING  ONLINE) 


CEO  SAVES  DAY 
OTSirARTING  COMPETITION) 
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Lotus,  software 


E-LEARNING 


PLAY 


1  ]  WIN  WITH  FLEXIBILITY:  Forget  about  offsites.  Train  your 
employees  online  and  you'll  get  them  updated  on  your  company’s 
rules  and  regulations  faster,  and  keep  your  bottom  line  healthier. 


2]  WIN  WITH  LOTUS:  As  the  market  leader  in  e-learning  solutions, 
Lotus  e-learning  helps  reduce  training  and  travel  costs  while 
enabling  sales  forces  to  sell  new  products  faster.  Lotus.  Part  of  our 
software  portfolio  including  DB2f  Tivoli®  and  WebSphere® 


3]  MAKE  THE  PLAY:  Visit  ibm.com/lotus/learn  and  check  out 
an  introduction  to  e-learning  Webcast. 


(e)  business  is  the  game.  Play  to  win: 
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MANAGEMENT 


Angst-Free  Feedback 
For  FT  Managers 


How  to  take  the  sting  out  of  giving  bad  news 


Managers  hate  to  give  negative  feed¬ 
back,  and  many  defeat  the  purpose  of  a 
feedback  discussion  with  employees  by 
setting  up  a  confrontation.  So  says  Jean- 
Francois  Manzoni  in  the  September  issue 
of  the  Harvard  Business  Review.  Man¬ 
zoni,  the  associate  professor  of  manage¬ 
ment  at  Insead  in  Fontaine¬ 
bleau,  France,  and  the  direc¬ 
tor  of  the  Insead-PwC 
Research  Initiative  on  High- 
Performance  Organizations, 
says  taking  a  different  ap¬ 
proach  to  giving  feedback  can 
make  those  discussions  — 
and  your  employees  —  more 
productive.  He  discussed  his 
ideas  with  Kathleen  Melymuka. 


be  contributing  to  the  situation,  and  if 
so,  how? 

In  addition  to  being  narrow,  this 
framing  is  binary  in  that  there  are  only 
two  possible  outcomes:  The  session  is 
a  success  if  Bill  accepts  the  feedback; 
otherwise,  it’s  a  failure. 


This  is  the  latest  in 
a  series  of  monthly 
discussions  with 
authors  of  articles 

in  the  HARVARD 
BUSINESS  REVIEW 

on  topics  of  interest 
to  IT  managers. 


What  is  the  most  common  mistake  IT  man¬ 
agers  make  in  giving  corrective  feedback  to 
their  employees?  IT  managers’  problem 
with  feedback  starts  with  the  way  they 
frame  —  mentally  construct  —  the  sit¬ 
uation.  Feedback  is  something  that 
bosses  have  and  subordinates  get.  The 
implicit  complement  is  that  this  feed¬ 
back  is  right,  of  course. 

How  might  this  play  out?  “Bill’s  perfor¬ 
mance  is  not  up  to  my  expectations.  I 
know  why:  Bill  has  the  following  short¬ 
comings/skill  or  character  deficiency.  I 
want  to  tell  Bill  about  this,  but  he  may 
not  like  hearing  what  I  have  to  say.  He 
may  be  hurt,  and  he  may  try  to  hurt  me 
in  return.  Also,  if  Bill  refuses  the  feed¬ 
back  and  pushes  back  on  me,  things 
may  escalate  and  worsen  the  current 
situation.  So  I  hope  Bill  will  accept  the 
feedback  and  spare  us  an  unpleasant 
moment.” 

What’s  wrong  with  this  approach?  This 
framing  is  narrow  because  it  excludes 
some  potentially  interesting  issues  and 
questions  such  as:  Am  I  right?  What’s 
the  evidence  on  which  my  assessment 
is  based?  Could  I  be  missing  part  of  the 
picture?  How  much  is  it  really  about 
Bill,  vs.  about  the  situation  Bill  is  oper¬ 
ating  in?  And  what  about  me?  Could  I 


Why  is  this  mistake  particularly 
likely  to  happen  in  an  IT  envi¬ 
ronment?  IT  environments 
present  three  characteris¬ 
tics  that  make  it  particular¬ 
ly  hard  for  bosses  to  ap¬ 
proach  feedback  produc¬ 
tively.  First,  the  success  of 
IT  projects  tends  to  be 
very  dependent  on  the  actions  of 
many  parties  outside  IT,  particularly 
IT  users.  When  looking  at  results,  it  is 
hence  difficult  to  untangle  the  exact 
contribution  of  the  IT  staff  from  the 
impact  of  the  conditions  they  were 
operating  in.  Second,  IT  is  often  a 
bad-news-driven  environment.  Most 
of  the  feedback  IT  receives  from  the 
organization  tends  to  be  negative. 

Last,  several  aspects  of  IT  involve 
work  that  is  intangible  and  largely  in¬ 
visible  until  completion.  Assessing 
progress  intelligently  is  difficult. 


Several  aspects 
of  IT  involve  work 
that  is  intangible 
and  largely  invisible 
until  completion. 
Assessing  progress 
intelligently 
is  difficult. 


You  say  the  situation  worsens  if  the  framing 
remains  frozen  during  the  discussion.  What 
does  that  mean?  Bosses  rarely  revise 
their  position  during  the  encounter, 
even  when  the  subordinate  brings  up 
potentially  relevant  information.  That 
lack  of  flexibility  prevents  a  more 
effective  handling  of  the  situation  and 
can  lead  to  an  escalation  in  tone 
and/or  content  of  the  discussion. 

Why  don’t  IT  managers  just  revise  their  re¬ 
strictive  framing  midstream, 
when  they  see  it  isn’t  working? 

First,  they  are  not  conscious 
that  they  framed  the  en¬ 
counter  in  a  narrow  and  bi¬ 
nary  way.  It’s  hard  to  con¬ 
sciously  revise  a  mental  con¬ 
struction  that  we  don’t  know 
we  have.  Second,  the  more 
intense  the  discussion,  the 
more  energies  are  diverted 
to  keeping  oneself  and  the 
discussion  under  control, 
and  the  smaller  the  band¬ 
width  available  to  process 
fully  the  information  we 
receive. 


There’s  a  different  approach  you 
call  “easing  in.”  What’s  that? 

Easing  in  is  an  attempt  to  avoid  a  colli¬ 
sion  with  the  other  party.  So  rather 
than  telling  you  what  I  have  in  mind,  I 
am  going  to  ask  you  a  series  of  ques¬ 
tions  which,  if  you  answer  them  cor¬ 
rectly,  will  lead  you  to  the  “right”  con¬ 
clusion  —  [the  one]  I  have  already 
made.  A  typical  easing-in  question  is: 
“Don’t  you  think  that. . .  ?”  It  really 
means:  “I  think  this  way,  and  I  really 
hope  you’ll  agree.” 

You  say  easing  in  is  a  gamble  that  often 
doesn’t  pay  off.  Why?  Easing  in  is  suc¬ 
cessful  only  when  the  subordinate 
gives  you  the  “right”  answers  and  does 
not  realize  he  is  being  manipulated. 

How  does  easing  in  go  wrong?  If  the  sub¬ 
ordinate  fails  to  give  the  “right” 
answers,  the  boss  must  either  fold  and 
try  again  later,  or  else  make  his  point 
more  explicit.  And  the  subordinate 
[may]  realize  somewhere  along  the 


ACCORDING  TO 
Jean-Francois 
Manzoni,  “IT  man¬ 
agers’  problem 
with  feedback 
starts  with  the  way 
they  frame  -  men¬ 
tally  construct  - 
the  situation.” 


way  that  this  is  not  really  a  discussion: 
He  is  being  led  carefully  to  a  prepack¬ 
aged  conclusion.  Most  people  don’t 
like  feeling  manipulated. 

So  aside  from  failing  to  achieve  their  pur¬ 
pose,  these  approaches  can  damage  rela¬ 
tionships?  The  frontal  delivery  of  [neg¬ 
ative  or  corrective]  feedback  often 
leads  to  escalations,  resulting  in  one  or 
both  parties  saying  things  they  didn’t 
really  want  to  say,  and/or  in  one  or 
both  parties  giving  up  and  pretending 
to  agree.  The  easing-in  approach  can 
lead  to  an  escalation  if  the  subordinate 
does  not  “play  along,”  and  it  can  lead 
to  the  subordinate  pretending  to  com¬ 
ply  if  he  realizes  the  boss  has  already 
made  up  her  mind.  None  of  these  out¬ 
comes  is  very  constructive. 

What  are  the  conditions  that  make  critical 
feedback  more  acceptable  to  employees? 

Research  suggests  that  feed¬ 
back  receivers  are  more  like¬ 
ly  to  accept  and  act  on  feed¬ 
back  when  they  feel  that  the 
feedback  source  has  good  in¬ 
tentions  toward  him/her;  de¬ 
veloped  the  feedback  fairly, 
which  includes  collecting  all 
relevant  information,  allow¬ 
ing  the  receiver  to  provide 
clarifications/explanations 
and  applying  consistent  stan¬ 
dards;  and  communicated  the 
feedback  fairly  by  showing 
openness  toward  and  support 
for  the  receiver. 


Can  you  give  me  an  example  of 
the  right  and  wrong  way  to  open 
a  feedback  discussion?  Bosses 
should  approach  feedback  with  a  men¬ 
tal  framing  along  the  following  lines:  “I 
am  not  happy  with  Bill’s  present  per¬ 
formance,  nor  with  our  relationship.  I 
think  I  understand  where  Bill’s  prob¬ 
lems  are  coming  from.  But  I  could  be 
wrong.  Bill  probably  feels  the  malaise 
and  wants  this  job  and  our  relationship 
to  work  at  least  as  much  as  I  do.  So  we 
both  want  the  same  thing  but  some¬ 
how  we’re  not  getting  it  right.  Let’s  sit 
down  and  discuss  why  this  is  the  case 
and  how  I  can  help.” 

This  framing  is  not  binary  — 
there’s  no  clear  pass/fail  criterion.  It 
is  broad  and,  hence,  flexible.  It  is  a 
good  basis  for  a  real  discussion.  If  you 
think  this  way,  the  words  will  come 
out  right.  I 

Melymuka  is  a  Computerworld  con¬ 
tributing  writer  in  Duxbury,  Mass. 
Contact  her  at  kmelymuka@ 
earthlink.net. 


THAT  SELF-MANAGING 


SELF-HEALING 


SORT  OF  WAY. 


NEW  DB2.  A  SELF-STARTEI 


What  keeps  databases  in  game  shape?  DB2  v8,  the  most  advanced  self-managing 
database  across  Linux?  UNIX®  and  Windows®  Turbocharged  querying  and  tuning 
saves  time,  resources  and  pushes  productivity  skyward.  And,  no  matter  what  form 
your  data  is  in,  it  lets  you  access,  analyze  and  manage  it.  DB2.  It’s  part  of  the  software 
team  that  includes  Lotus? Tivoli®  and  WebSphere®  Learn  more  at  ibm.com/db2/new 
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IBM,  DB2,  Lotus,  Tivoli,  WebSphere,  the  e-business  logo  and  e-business  is  the  game.  Play  to  win  are  registered  trademarks  or  trademarks  of  International  Business  Machines 
Corporation  in  the  United  States  andfor  other  countries.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United 
States  and/tor  other  countries.  Windows  is  a  registered  trademark  of  Microsoft  Corporation  in  the  United  States  andfor  other  countries.  ©2002  IBM  Corporation.  All  rights  reserved. 
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Dear  Career  Adviser: 

I’m  a  senior  systems  engineer  in  the  telecom  industry 
with  a  background  in  C++  and  Network  Exchange  look¬ 
ing  for  a  new  home,  and  Fm  wondering  whether  to  stay 
in  telecom  or  switch  out  since  the  current  opportunities 


are  rather  slim.  I’m  running  out 
of  places  to  look. 

—  Telecom  Wonder 

Dear  Wonder: 

Check  out  advanced  net¬ 
working  at  www.internet2.edu, 
which  describes  the  efforts  of 
industry  and,  particularly,  edu¬ 
cation  moving  toward  new 
standards. 

“Organizations  are  very  in¬ 
terested  in  expanding  the  ca¬ 
pabilities  of  their  networks  to 
include  real-time  television- 
quality  videoconferencing,  en¬ 


abling  true  multisite  collabo¬ 
ration,”  says  Greg  Wood,  di¬ 
rector  of  communications  at 
Washington-based  Internet2,  a 
consortium  led  by  200  univer¬ 
sities  in  partnership  with  in¬ 
dustry  and  government  that 
develops  advanced  network 
applications  and  technology. 

Just  like  some  10  to  15  years 
ago  when  the  National  Science 
Foundation  helped  figure  out 
how  to  use  TCP/IP  network¬ 
ing  on  a  grand  scale,  today’s 
academic  and  research  worlds 
are  attracting  many  of  those 
who  left  for  private  industry 


jobs  but  now  want  to  work  on 
new  and  interesting  uses  of 
high-performance  networking 
across  global  environments. 
Check  out  the  institutions  and 
companies  listed  at  Internet2 
and  the  job  postings  at  www. 
educause.edu. 

Dear  Career  Adviser: 

I’m  a  Unix  systems  adminis¬ 
trator  with  some  20  years  of  ex¬ 
perience.  But  I  want  to  be  in  the 
strongest  possible  position  to 
keep  my  current  job  —  and  pre¬ 
pare  in  case  I  am  laid  off.  My 


employer  is  a  small  company 
that  doesn’t  pay  for  education, 
and  my  budget  and  time  are 
slim.  Any  ideas? 

—  Keeping  Up 

Dear  Up: 

Often,  keeping  a  job  or  get¬ 
ting  a  new  one  depends  on 
your  ability  to  show  that  you 
have  kept  up  technically  and 
have  the  initiative  to  learn. 
You  can  download  tool  kits 
and  work  on  development  ef¬ 
forts  at  home.  Take  on  extra 
projects  at  work 
beyond  the  usual 
scope  of  your  as¬ 
signments.  Find 
out  more  about 
the  most  visible 
projects  at  your 
company  and 
start  adding  the 
skills  for  those 
projects,  even  if 
you  aren’t  cur¬ 
rently  working  on 
them. 


COMPUTERWORLD  September  23, 2002 


If  your  budget  and  sched¬ 
ules  are  tight,  you  have  alter¬ 
natives,  such  as  the  Associa¬ 
tion  for  Computing  Machin¬ 
ery  ( www.acm.org )  and  the 
IEEE  Computer  Society, 
which  provide  free  distance 
learning  courses  as  some 
of  their  newest  benefits  of 
membership. 

The  Computer  Society’s 
distance  learning  program 
covers  hot  topics  such  as 
Java,  C++  programming,  Cisco 
networking  devices,  HTML 
I  and  project  management. 

Through  its  part¬ 
nership  with 
KnowledgeNet  in 
Scottsdale,  Ariz., 
the  society  pro¬ 
vides  more  than 
100  course  titles  to 
its  members.  To 
view  the  complete 
course  catalog, 
visit  http:// 
computer.org/ 
DistanceLearning/ 
catalog.htm.  I 


fran  quittel  is  an  expert 
in  high-tech  careers 
and  recruitment. 


WORKSTYLES 

Centralizing  IT 
In  a  Lively  Way 


What  are  the  most  critical  sys¬ 
tems  supported  by  your  depart¬ 
ment?  “Hoechst  was  a  mix¬ 
ture  of  all  sorts  of  things: 
60%  pharmaceuticals  and 
40%  other  stuff.  Celanese 
now  has  ‘the  other  stuff,’ 
which  includes  the  com¬ 
pound  that  goes  into  paint 
and  vinyl  siding,  the  cellu¬ 
lose  acetate  that  goes  into 
yarn  and  men’s  suit  linings, 
the  sweetener  that  goes  into 
[some  diet  sodas]  and  the 
foils  for  things  like  M&M’s. 

“From  the  ’90s,  Hoechst 
said,  ‘You’re  on  your  own, 
and  you  have  to  be  prof¬ 
itable.’  So  we  are  now  bring¬ 
ing  all  our  different  compa¬ 
nies  together  under  one  op¬ 
erating  company.  As  a  result, 
we  have  several  initiatives 


called  ‘One,’  such  as  One 
Celanese,  One  SAP. 

“From  an  IT  point  of  view, 
we  also  had  five  indepen¬ 
dent  IT  organizations.  We’ve 
put  in  shared  services  for 
our  infrastructure,  and  we 
have  a  governance  group 
that  does  architecture  and 
project  management.  The 
One  SAP  project  intends  to 
consolidate  the  many  SAP 
systems  we  have. . . .  After 
that  is  done,  we  will  be  at 
80%  centralized.” 

How  would  you  describe  the 
pace  of  the  work?  “We  work 
more  than  40  hours  a  week, 
but  people  come  here  to  get 
things  done.  Nobody  looks  at 
the  clock  and  says,  ‘I  have  to 
leave  at  5.’ 


“This  is  a  lively  company.” 

What  makes  it  lively?  “When 
we  were  Hoechst,  we  were 
something  like  a  $30  billion 
company,  and  now  that  we’re 
a  $5  billion  company,  we  un¬ 
derstand  our  behavior  has  to 
change.  In  the  past,  we  were 
like  a  slow-moving  elephant; 
now  we  want  to  be  the  danc¬ 
ing  elephant.  People  have 
understood  that  we  have  to 
get  things  done  ourselves  be¬ 
cause  no  one  else  will  do  it 
for  us.  There’s  a  sense  of 
ownership.” 


How  would  you  describe  the 
company  culture?  “It’s  a  very 
international  company.  We 
have  a  culture  that’s  a  mix¬ 
ture  of  European,  U.S.,  Asian 
and  Mexican.  If  you  look  at 
the  management  levels,  it’s  a 
variety  from  different  na¬ 
tions.  Many  people  speak 
multiple  languages.” 

How  would  you  describe  the  IT 

culture?  “It’s  informal.  Man¬ 
agement  holds  town  hall 
meetings,  and  our  board 
travels  around  to  give  pre¬ 
sentations  and  really  invite 


questions  and  get  questions. 
They  are  trying  to  forge  an 
environment  where  people 
can  speak  up  and  drive 
things.” 

What  do  you  like  best  about 
how  career  advancement  and 
training  are  handled?  “We’ve 

identified  high-potential 
people  who  get  special  treat¬ 
ment  and  are  supposed  to  be 
our  future  leaders.  They  get 
sent  around  the  world  and 
throughout  the  company,  to 
IT  or  logistics  or  finance. 
They  are  required  to  take 
with  them  an  understanding 
of  all  the  problems  and  is¬ 
sues  and  opportunities  of 
these  functions.” 

What  aspect  of  work  do  you 
look  forward  to  each  day? 

“The  connection  with  peo¬ 
ple  and  different  cultures.  I 
travel  quite  a  bit,  to  Ger¬ 
many,  Dallas  and  once  in  a 
while  in  Asia.  That  is  still 
very  interesting.” 

-MaryBrandel 

brandels@attbi.com 
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Hear  User. 


Case  Studies 


at  the  original,  largest  and  most  proven  educational 


forum  for  IT  users  involved  in  storage  and  related 
technologies 


Meet  Industry  Leaders--and  network  with  luminaries,  press  and  analysts 


Get  a  Valuable 
Education 


Witness  the  World’s  Foremost. 

Interoperability 

and  Solutions  Demo 


.  including  I * I  =4 Vi  SNIA-Certification  "Test-Ready" 
Courses  (see  Web  site  for  details),  SNIA-produced 
tutorials,  general  sessions,  the  Interoperability 
and  Solutions  Demo  ...  plus  enjoy  a  complete 
conference  package  including  the  Expo,  meals, 
receptions,  gala  dinner,  and  golf  for  IT  users 

.  where  you  can  "play  in  the  SANdbox” 
and  see  50+  companies  prove  that  their 
solutions  work  together 


Pre-Conference..  .  complimentary  golf  outing 
Golf  Outing  for  registered  IT  Users 


Sponsored  by 

& 

StorageTek 


See  and  hear: 

Geoffrey  Moore 

Chairman  &  Founder 
The  Chasm  Group 

Author  of  “Living  on  the  Fault 
Line,"  “Crossing  the  Chasm" 
and  "Inside  the  Tornado" 

‘How  to  Creatively  Apply 
IT  in  Today’s  Economy" 


Fran  Dramis 

CIO 

BellSouth 


"Dealing  with 

Vast  Amounts  of  Data’ 


Curtis  Robb 

SVP  &  CIO 
Delta  Air  Lines 


‘Storing  and  Managing 
Business  Critical 
Information” 


Storage  Networking  World®  sponsors  as  of  9/19/02 
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i Kanbay  is  a  premier  global 
'systems  integrator  that 
provides  high-quality,  high- 
value  solutions  to  the 
-insurance,  banking,  credit 
’card,  consumer  lending  and 
securities  industries.  We 
provide  a  complete  lifecycle 
of  services  including 

Dram  management, 
less  analysis, 
technology  planning, 
architecture,  application 
development,  maintenance 
and  support.  Our 
specialized  services  include 
business  intelligence, 
package  selection, 
customization  and 
.implementation. 

The  following  opportunities 
are  based  at  our  corporate 
headquarters  in  Chicago 
and  locations  nationwide. 
We  are  seeking  candidates 
with  technical  skills  in:  JAVA, 
J2EE,  OOAD,  WebSphere, 
XML,  COBOL,  CICS,  DB2, 
JCL,  and  VisionPlus 
expertise  in  an  MVS 
environment. 

•  Project  Managers 
•  Technical  Architects 
•  Project  Leads 
•  Programmer/ 

Analysts 

For  consideration,  forward 
response  to:  Kanbay,  Inc., 
6400  Shafer  Ct.,  Suite  100, 
Rosemont,  IL  60018.  Fax: 
847-318-0784.  Email: 
uscareers@kanbay.com. 
Please  reference  code 
CW0902  in  all 
correspondence.  Kanbay  is 
an  Affirmative  Action 
Employer/EOE 
organization. 


Database  Analyst  wanted  in 
Houston,  TX.  Respond  to:  HR 
Dept.,  GNT  Inf  I,  Inc.,  10333 
Harwin  Dr.,  Ste.  297,  Houston, 
TX  77036. 


APPLICATION  SYSTEM  ANA¬ 
LYST/PROGRAMMER  wanted 
by  Petrochemical  engineering 
&  construction  co.  in  Houston, 
TX.  Must  have  degree  &  exp. 
Respond  by  resume  only  to:  Ms. 
Sharon  Balke,  Sr.  H.R.  Specialist, 
N/C  #10,  ABB  Lummus  Global, 
Inc.  3010  Briarpark,  Houston, TX 
77042. 


Fox  Pro  Programmer 

LEE  Marketing  Services,  Inc.  a 
national  leader  in  direct  marketing 
has  positions  available  in  our 
Information  Systems  Department 
for  a  Programmer.  BS  Degree  or 
equivalent  plus  1  year  relevant 
work  experience,  Work  with  2 
of  the  following:  SQL  Server, 

Visual  FoxPro,  VB  &  Unix. 
Responsibilities  include  design, 
implement  and  support  software 
applications  utilizing  various 
marketing  software. 

Systems  Administrator  wanted 
by  Garments  Manufacturer 
in  Jersey  City,  NJ.  Must  have 
Associate  Degree  in  any  field 
and  5  yrs  exp.  Respond  to:  Seoul 
Suits  and  Coats,  Inc.,  1072 
Westside  Ave.,  Jersey  City,  NJ 
07306. 

Java  Developer/Software  Engi¬ 
neer  sought  by  telecommunica¬ 
tions  service  co  in  Cherry  Hill, 
NJ,  to  support  multiple  applica¬ 
tions  across  various  platforms 
involving  BEA  Weblogic,  Silver- 
Stream,  and  Oracle  9iAS  using 
JSP,  Servlets,  JDBC  and  EJB. 

Must  have  Bach,  in  Comp.  Sci., 
Engg.  or  equiv.  and  min.  of  two 
years  relevant  exp.  Respond  to: 
HR  Dept.,  Zone  Telecom,  Inc., 

200  Lake  Drive  East,  Suite  200, 

Cherry  Hill,  NJ  08002. 

BUSINESS  SOFTWARE  ENGI¬ 
NEER  wanted  by  Architectural 
firm  in  Houston,  TX.  Must  have 
M.S.  in  MIS  or  Comp.  Sc.  plus 
exp.  Respond  by  resume  only  to: 
Mr.  C.C.  Lee  STOA  Golemon 
Bolullo  Architects  6213  Skyline 
Dr.,  Houston,  TX  77057. 

Distance  Learning  Facilitator. 
Design  &  maintain  tech  ops  for 
college  internet  courses  off’d  24 
hrs/day.  Provide  tech  support  & 
train’g.  Devel  s/ware,  DBs,  & 
systems.  Work  is  8-5  but  varies 
due  to  diff’g  time  zones  &  on-call 
assgnmnts.  Bachelor  degree  in 
CS  or  Eng’g  req’d,  as  is  2  yrs  exp 
in  job  offered  or  web-based  sys 
admin  position. 

Competitive  salary.  Will  accept 
masters  degree  in  req’d  field  in 
lieu  of  2  yrs  exp.  Resumes  to  Hal 
G.  Cross,  VP  for  Bus/Fin,  Job  # 
2329.02,  Baptist  Bible  College/ 
Seminary,  538  Venard  Road, 
Clarks  Summit,  PA  18411. 

Sr.  Consultant  to  write  proposals; 
presentations;  project  plan, 
mgmt.  &  implement;  customer 
service  &  business  devel.  Tech¬ 
nical  duties:  statistical  analyses 
and  modeling  using  SAS,  SPSS; 
develop  software  applications 
using  Oracle,  PL/SQL,  C  and 
C++  to  solve  customer  issues  & 
optimize  b/z  processes  for  mktg., 
sales,  inventory  control.  MS  or 
MBA  in  b/z  Admin.  +  2  yr.  exp. 
Salary  at  prevailing  wages.  Apply 
to  Milan,  1640  Powers  Ferry  Rd., 
Bldg.  21,  Marietta,  GA  30067 
with  proof  of  work  authz. 

Developer  wanted  by  Multi-Nat'l 

Mktg  Communications  Co  in 

Manh.  Pert  coding,  programming 

&  appi  dvlpmnt;  follow  &  imple¬ 
ment  tech  specs;  doc  &  catalog 

all  software.  BS  in  Comp  Sci, 

Electronics  or  Engr  &  2yrs  exp  in 

job  offered  req.  Respond  to: 

AAH/HR  Dept,  PO  Bx  4241, 

GCS,  NY  10163. 

Programmer  Analyst.  8a-5p.  40 
hrs/wk.  Analyze,  dsgn,  dvlp, 
prgm  &  implmt  bus  applies  using 
JCL,  CICS,  VSAM,  DB2,  COBOL- 

11  and  SCREEN-COBOL.  Edu¬ 
cational  reqmt:  Bach  or  equiv  in 
Electrical  or  Electronics  Engg. 
Comp  Sci/Engg,  Mgmt  Info 
Systms,  Bus  Admin  or  related 
field.  Exp  reqmt:  2  yrs  in  job  offd 
or  as  Systms  Anaiyst/Systms 
Executive  or  Prgmr.  Resume: 
Avalon  International,  Inc.,  3550 
Engg  Dr,  Ste  260,  Norcross,  GA 
30092. 

Securities  Clearing  firm  is  seek¬ 
ing  a  Senior  Systems  Architect 
to  maintain  software  for  commu¬ 
nications  within  the  company 
and  for  communication  with 
external  users.  Must  have  a 
Bachelor’s  degree  or  equivalent 
in  Computer  Science  or  a  related 
field  and  a  minimum  of  5  years 
of  experience  in  Mainframe  Pro¬ 
gramming  OR  a  Master’s  degree 
or  equivalent  in  Computer 
Science  or  a  related  field  with  a 
minimum  of  3  years  of  experi¬ 
ence  in  Mainframe  Programming. 
Experience  must  also  include 
CICS,  MQ  Series,  Internals  and 
OS/390  architecture.  Fax  resumes 
to  HR  Dept.  DTCC  @  212-855- 
5802.  Refer  to  job  8565. 

Systems  Analyst-  CommVault 
Systems  Inc.  is  in  need  of  a 
Systems  Analyst  for  its  Oceanport, 
NJ  location.  Design  &  implement 
network  &  systems  architecture 
for  storage  mgmt.,  data  recovery, 
storage  area  networks,  &  security 
design.  Must  have  a  Bach.  Deg. 
in  Mgmt.  Info.  Systems,  Comp. 
Science,  Eng'g,  or  related  field, 
2yrs  exp.  in  the  job  offered  or 
in  a  network  admin,  occup.  & 
exp.  w/ TCP/IP,  SMS,  &  UNIX. 

EOE.  Resume  to:  thoffman@ 

commvault.com 

Programmer/Analyst-Analyze, 
design,  program  &  implement 
various  computer  applications, 
Req.  Bachelors  in  Comp.  Sci., 
Technology,  MIS  or  Engg.  (any 
field)  +  1  yr.  exp.  Contact:  Inter¬ 
national  Systems  Technologies, 
Inc.,  1812  Front  Street,  Scotch 
Plains,  NJ  07076. 

Software  Developer.  Develops 
software  fortelecomm  ./business 
applic’s;  determines  feasibility  of 
design  within  time/cost:  evaluates 
interfaces  between  hardware- 
software/performance  require¬ 
ments;  measures  design  out¬ 
come;  develops/directs  testing 
procedures,  programming/docu¬ 
mentation;  uses  T-SQL,  MS  SQL 
Server,  MS  Visual  Studio,  MS 
Visual  Basic,  COM/DCOM.  Req. 
Bach,  in  Comp.  Sci.  rel./equiv.  & 

2  yrs.  exp.  Resume  to  K.  Baker, 
Radiant  Telecom,  Inc.,  1020 
N.W.  163rd  Drive,  Miami,  FL 
33169. 

Manager,  3D  Appl.  Rsrch  Group, 
wanted  for  mfgr  of  computer 
components.  Req.  B.S.  in  E.E.  or 
related  scientific  discipline  plus 
8  yrs.  tech,  devlpmt/mgmt  exp.  in 
comp,  graphics  industry.  Reply  to 
K.B.,  H.R.  Dept.,  ATI  Research, 
Inc.  62  Forest  St.,  Marlboro  MA 
01752. 

Junior  Systems  Analyst.  Assist  in 

designing  and  installing  a  com¬ 
puter  system  for  inventory,  distri¬ 
bution  &  accounting  manage¬ 
ment  including  s/w  and  h/w 

integration.  Req:  Bachelors 

in  Computer  Sci.  40hr-wk.  Job/ 

Interview  Site:  Chatsworth,  CA. 

Send  resume  to  Ganesh  Industrial 

Supply,  Inc.,  20621  Plummer  St., 

Chatsworth,  CA  9131 1 

SYSTEMS  ANALYST  for  distrib¬ 
utor  to  South  America  Assist 

in  installation,  management, 
configuration,  maintenance, 
trouble-shooting  &  management 
training  of  local  network  for  both 
US  &  Venezuela;  Assist  in  transfer 

of  accounting  &  management 

databases  between  domestic  & 

foreign  corps.  Min.  req:  Bach  in 
Computer  Information  Systems 
+  2  yrs  exp.  Resumes:  Total  Music 
Dist.,  P.O.  Box  260007,  Pembroke 

Pines,  FL  33028. 

A  new  millenium,  a  new  solution.  ITcarecrs 
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Software  Developer  to  develop 
software  usng  ASP,  VB,  XML, 
XSL,  JavaScript,  VBScript, 
PERL  CGI,  C,  C++,  Java,  MS 
SQL  Server  ,  Oracle  and  PL- 
SQL.  Design  and  develop 
VB-ASP  classess.  Database 
design  and  develop  stored  procs 
&  triggers.  Prepare  functional 
specs,  code  test  and  debug. 
Understand  customer  req;  product 
support  &  assist.  BS  in  Comp  Sci 
or  equiv.  2+  yrs  exp.  +  expertise 
in  applicn.  software  using  OOAD 
&  E-Commerce  tech,  on  MS 
paltform.  Competitive  salary. 
Apply  to  PSC,  320  Wyehwood 
Court,  Alpharetta,  GA  30022 
with  prrof  of  work  authorization. 


Jr.  Computer  Programmer.  Assist 
in  Developing  SAW  including 
modifications,  workflow,  analysis 
&  testing  on  windows  NT  using 
ASR  VS,  javascript,  SQL,  C  &  C++. 
Req:Bachelors  in  Computer 
Science  or  Computer  Engg., 
40  HrAWk,  Interview  Site: 
Patheo  Inc., 5455  Garden  Grove 
Blvd.  #425,  Westminister,  CA 
92683,  Send  Resume  to: 
resumes  @  patheo.com 


Software  Engineer.  Design  web 
based  computer  technology  and 
software  with  the  use  of  JAVA, 
ORACLE  and  MS  SQL  server  on 
Windows  and  SUN  Solaris. 
Req:Bachelors  in  Computer 
Science  or  Computer  Engineering. 
40  hr/wk.  Job/Interview  Site:  Los 
Angeles,  CA.  Send  resume  to 
Reunion.com,  12200  WOlympic 
Blvd.  Suite  270  Los  Angeles,  CA 
90064-1020 


PROGRAMMER  ANALYSTS 
AND  SYSTEMS  ANALYSTS 
(multiple  positions)  sought  by 
Edison,  NJ-based  S/ware  Con¬ 
sultancy  firm.  Must  have  Bach  or 
equiv  in  Comp  Sci  or  engg  &  1  yr 
s/ware  exp.  Respond  to:  HR 
Dept.,  AK  Systems,  Inc,  100 
Metroplex  Drive,  Suite  303, 
Edison.  NJ  08817. 

Internet  Marketing  Coordinator  - 
Photo  finishing  &  printing  service 
seeks  indiv  to  design  &  develop 
the  marketing  strategies  for  the 
Internet  platform.  Req'd:  Bache¬ 
lor's  Degree  in  Com.  Science,  2 
yrs  of  exp  in  job  offered  or  2  yrs 
exp.  as  a  Mrkting  Mgr  related 
position  with  Internet  Marketing 
exp,  must  have  knowl/exp  in 
Photoshop,  Flash,  Java  &  Oracle 
Database.  RSVP  to  Attn:  Mr.  Pi, 
Photo  Experts,  Inc.  57-08  39th 
Avenue,  Woodside.  NY  1 1 377 


Senior  Programmer  Analyst 
sought  by  NYC-based  banking 
corp.  to  perform  internal  busi¬ 
ness  reporting  requirements  and 
specifications,  and  to  design, 
code.  test,  debug,  document  and 
implement  management  and 
operational  reporting  projects 
using  Oracle  Financial  Services 
Applications,  Oracle  Financial 
Analyzer.  Oracle  Express.  Oracle 
Discoverer,  PL/SQL  and  Oracle 
Forms  and  Reports.  Should 
have  BS  in  Comp  Science/Engg 
or  equivalent  with  3  yrs  of  exp  in 
duties  listed  above.  Respond  to: 
HR  Dept,  Sumitomo  Mitsui 
Banking  Corporation,  277  Park 
Avenue,  6th  Floor,  New  York,  NY 
10172. 


Systems  Administrator  to  main¬ 
tain  on  board  computer  systems 
such  as  FIDELIO,  Pronto  Inter¬ 
active  TV,  RED-M  Internet  wireless 
systems.  Full  time  position  M-F, 
located  in  Miami,  offers  good 
salary.  Applicants  with  Bachelor's 
degree  in  Comp.  Engg  and 
2  years  exp.  in  the  job  send 
resumes  only  to:  Alice  Brennan, 
Mgr.  H.R.  Residen  Sea  Resorts 
Ltd.  5200  Blue  Lagoon  Drive 
#790.  Miami  Florida  33126. 

Several  computer  related 
positions  available  for  large 
medical  products  distribution 
company.  Degree,  technical 
skills  &  experience  vary  per 
positions.  Send  resume  to 
Ann  Christante,  PSS  World 
Medical,  Inc.,  4345  South- 
point  Blvd.,  Jacksonville,  FL 
32246. 

Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley. 

1-800-762-2977 


Tech  Project  Manager  wanted 
by  Research  Consulting  &  Info 
Services  Co  in  MA.  Plan  &  im¬ 
plement  tech  &  network  support 
systs;  oversee  implementation 
of  new  software  &  tech  systs; 
create  doc  of  tech  systs;  respon¬ 
sible  for  Goldmine  Software  & 
Database.  MA  in  Bus  Admin  or 
Info  Mngmnt  &  6  mos  exp  in  job 
offered  req.  Respond  to;  VP 
/Mngmnt  Ventures,  20  University 
Rd,  Cambridge.  MA  02138. 


Software  Engineer-  (Murray  Hill, 
NJ)  Develop  &  implement 
production  application  systems 
according  to  user  needs  & 
schedule/cosi  limitations.  Integrate 
multiple  platform  solutions  & 
implement  client/server  &  web 
development  projects  to  improve 
workflow.Req'd:  Bach.  Deg.  in 
Comp  Science,  Comp.  Mgmt,  or 
related  discipline,  5  yrs  exp.  in 
the  job  offered  or  as  a  Software 
Developer  or  Systems  Analyst  & 
exp.  with  UNIX  &  ORACLE 
loader  and  import/export  utilities. 
Send  resume  to:  The  BOC 
Group,  Inc.,  575  Mountain 
Avenue,  Murray  Hill,  NJ  07974. 
Job  Code:  SE/DH 


Programmer;  Works  under  the 
supervision  of  Sr.  programmers 
to  convert  project  specs  to  create 
/modify  computer  programs; 
develop  programs  to  manipulate 
data  using  AWK/C/Basic;  develop 
test  procedures/software;  increase 
program  operating  efficiency; 
document  program  development. 
Req:  Bach  in  Comp  Sci  rel/equiv 
and  1  yr  exp  or  3  years  work  exp 
may  be  substituted  for  req  of 
Bach  &  1  yr  exp.  Resume:  HR, 
The  USA  Bouquet  Company, 
1500  NW  95th  Ave,  Miami,  FL 
33172. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  analyze, 
test,  implement  and  maintain 
system  software  products  for 
e-business  infrastructure  using 
object  oriented  design  and 
methodologies  on  UNIX  and 
Windows  environment  with  C++ 
and  Java;  design  client/server 
systems  with  multi-threading, 
networking,  inter-process  com¬ 
munications  and  memory  man¬ 
agement.  Require:  M  S.  in  Com¬ 
puter  Science  and  one  year  of 
experience  in  the  job  offered  or 
any  experience  providing  skills  in 
described  duties.  Competitive 
salary  and  benefits.  40  hours 
/week,  9  am  to  5  pm,  M-F.  Apply 
with  resume  to:  Human  Re¬ 
sources  Coordinator,  Chutney 
Technologies,  Inc.,  3490  Piedmont 
Road,  Suite  1100,  Atlanta,  GA 
30305. 


SENIOR  LOTUS 
NOTES  DEVELOPER 
(SENIOR  ENGINEER) 

Develop,  implement,  create,  and 
test  workflow.  Track  applications 
in  a  Lotus  Notes/Domino  envi¬ 
ronment.  Perform  database 
design  and  web  development 
using  Lotus  Script,  Java  Script, 
ODBC,  OLE.  Develop  test  and 
debug  user  interfaces  for  the 
applications.  Must  have  a  Bach¬ 
elor's  Degree  in  Engineering, 
Computer  Science  or  related 
field.  Must  have  three  years 
of  experience  as  a  programmer 
or  analyst  in  Lotus  Notes 
environment.  Salary  and  benefits 
commensurate  with  experience. 
Send  resume  to:  Joseph  W. 
Pereira,  Senior  Human  Re¬ 
sources  Advisor,  Norwalk 
Hospital,  Maple  Street,  Norwalk, 
CT  06856 


Sr.  Software  Engineers  (2)- 

Design/develop/qualify/test/ 
support  large  scale  client-server 
prod,  in  Windows  NT/2000, 
translate  designs  to  software 
prod. using  Windows  NT/2000, 
Borland  Delphi/MS  SQL/  Para- 
dox/Word/Excel/Access/XML/C 
OM/DCOM.  Bachelor's  degree 
Computer  Sc.,  Engineerg  or 
related  field  +  2  yrs  exp.  in  position, 
as  Software  Developer,  or 
as  Software  Eng.  req'd  Must 
be  proficient  in  Windows 
NT/2000/Delphi/MS 
SQL/COM/DCOM.  $71,887- 
$79,1 18/yr,  40  hrs/wk,  OT  as 
need.  Ref:  VC. 

Software  Engineers  (3)- 

Develop/qualify/test/support 
large  scale  client-server  prod,  in 
Windows  NT/2000,  translate 
designs  to  software  prod,  using 
Windows  NT/2000,  Borland  Del¬ 
phi/MS  SQLVParadox/Word/Ex- 
cel/Access/XML/COM/DCOM. 
Bachelor's  degree  Computer 
Sc.,  Engineerg  or  related  field 
req'd.  Must  be  proficient 
in  Windows  NT/2000/Delphi/ 
MS  SQL/COM/DCOM.  $55k- 
62.5K/yr,  40  hrs/wk,  OT  as  need. 
Ref:  LR 

Send  resume:  D.  Root,  HR 
Director,  Alogent,  4005  Windward 
Plaza,  Alpharetta,  GA  30005. 


SYSTEMS  DEVELOPER:  De¬ 
sign,  develop  &  implement  IT 
solutions  &  support  to  global 
SAP  R/3  systems  running  in  20+ 
locations.  Deliver  solutions  in 
SAP  R/3  &  related  SAP  systems. 
Troubleshoot  in  SAP  systems. 
BS  in  Comp  Sci,  Info  Systems 
or  related  field  plus  2  yrs  exp 
required.  Must  have  experience 
w/SAP  R/3  within  system  devel¬ 
opment,  ABAP/4  Reporting  Tools, 
SAP  Script,  User  Exit,  Inter¬ 
faces/Integrations  using  BDC's 
/LSMW,  BAPI's,  ALE/IDOC 
technologies;  SAP  ITS  & 
related  SAP  3rd  party  tools. 
Pis  forward  resume  to: 
nzna-jobs  @  novozymes.com. 


SAP  Systems  Analyst: 

Requires:  Bachelor's  degree  in 
Econ,  Bus.  Admin  or  Info  Sys.;  2 
yrs'  exp.  in  job  offered  or  in  bus. 
info  sys  analysis/consulting;  & 
demonstrated  expertise  with 
ABAP,  SAP  &  SAP  modules 
FI/CO,  SD,  &  MM  &  SAPScript. 
Duties:  Develop,  implement  & 
maintain  complex  SAP  systems 
for  Pharma  sector.  Analyze  & 
configure  sophisticated  bus 
sys.  &  applications  &  interfaces. 
Design,  write,  test  &  debug  com¬ 
plex  computer  applications  using 
ABAP,  SAP,  SAPScript.  Configure 
bus.  applications,  modules  &  re¬ 
ports  in  SD,  MM,  &  FI/CO.  Re¬ 
sponsible  for  creating  ABAP 
interfaces  &  full  life  cycle  devel¬ 
opment  of  projects.  Perform  sys¬ 
tem  impact  analysis  for  federal  & 
state  regulatory  compliance. 
Prepare  system  specifications. 
Develop  documented  customiza¬ 
tion  in  SAP  environment  using 
ABAP  programming  language 
Analyze,  design  &  modify  existing 
applications  in  SAP  system  to 
improve  performance.  $65,000 
/year.  8  am  -5  pm.,  M-F,  40hrs 
/wk.  EOE.  Send  2  resume 
w/copy  of  Ad  to:  Cobb/Cherokee, 
Job  Order  #GA7121584,  465 
Big  Shanty  Road.  Marietta,  GA 
30066-3303  or  nearest  Depart¬ 
ment  of  Labor  field  service  office. 


Chief  Computer  Programmer 
Plan,  develop,  program,  test  & 
document  computer  programs 
using  structured  analysis;  ana¬ 
lyze  &  write  detailed  program 
specifications:  design  &  deploy 
systems  using  Sterling's  COOL: 
GEN,  Oracle  9iAS,  Oracle 
Designer  6i,  &  Oracle  Developer 
61.  Req.  BS  in  CS  or  related  or 
foreign  equiv  degree  plus  4  yr 
work  exp.  Hrs:  8a-5p,  M-F.  Send 
resume  to  Moorecroft  Systems 
202  Abbey  Ct.,  Alpharetta,  GA 
30004  Ref  ST. 
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IT  CAREERS 


HCL  TECHNOLOGIES  AMERICA  INC. 

HCL Technologies  America,  Inc.  and  its  affiliate  companies  like 
HCL  Enterprise  Solutions  and  HCL  Technologies  (Mass.)  Inc. 
have  multiple  openings  at  its  offices  in  Sunnyvale,  CA;  Stamford 
CT :  Plano  TX;  Florham  NJ  ,  Irvine  CA,  Vienna,  VA,  Boston,  MA, 
Chicago,  IL  Detroit,  Ml  as  well  as  project  sites  throughout  the 
United  States  for  the  following  positions: 

Software  Engineers 
Programmer  Analysts 
Systems  Analysts 
Database  Administrators 
Hardware  Engineers 
Budget  Analysts 

Systems/Network  Administrators 
Project  Managers 

Account  Managers/Sales  Managers/Business  Managers 

Sales  Engineers 

Industrial  Engineers 

Market  Research  Analysts 

Management  Analysts 

Human  Resource  Representative 

Accountants 

Salary  will  be  commensurate  with  education  and  experience. 
All  positions  may  involve  travel  or  relocating  to  various  client 
sites  through  out  the  US. 

For  consideration  please  send  your  resume  to: 

HCL  America  Technologies,  Inc. 

Attn.:  HR  Dept.  (Computer  World  Ad.) 

330  Potrero  Avenue 
Sunnyvale,  CA  94085 
Email:  cwjobs@hcltech.com 


Please  indicate  the  location  and  the  position  you  are 
applying  for. 

www.hcltechnologies.com 


SOFTWARE  ENGINEER 

Multiple  openings  for  software 
engineers  to  design,  develop 
and  test  computer  programs  for 
business  applications;  analyze 
software  requirements  to  deter¬ 
mine  feasibility  of  design;  direct 
software  system  testing  proce¬ 
dures  using  expertise  in  C #, 
ASP.NET  SQL  Server  2000  and 
COM.  Requirements:  Bachelor's 
Degree  or  equivalent  in  Com¬ 
puter  Science  or  related  field  and 
two  years  experience  as  a  soft¬ 
ware  engineer  or  computer 
programmer,  knowledge  of  C#, 
ASP.NET,  SQL  Server  2000 
and  COM.  Salary:  $66, 000/year. 
Working  Conditions:  8:00  A  M 
to  5:00  P.M.,  40  hours/week, 
involves  extensive  travel  and 
frequent  relocation.  Apply: 
Manager,  Butler  County  Career- 
Link,  Pullman  Commerce  Center, 
112  Hollywood  Drive,  Suite  101 , 
Butler,  PA  16001,  Job  No. 
WEB274183. 


Sr.  Consultant  -  Technology.  Du¬ 
ties:  Design,  develop  &  imple¬ 
ment  internet  appls.  using  Java, 
C  &  C++.  Resp.  for  all  project  life 
cycle  processes.  Author  project 
documentation  incl.  require.,  de¬ 
sign,  functional  &  tech,  specs., 
test  plans  &  scripts.  Provide  work 
estimates  for  develop,  tasks  & 
review  project  specs.  &  sched¬ 
ules.  Identify  tech,  issues,  develop 
solutions  &  communicate  alter¬ 
natives  to  client.  Requires:  M.S. 
(or  foreign  equiv.)  in  Comp.  Sci., 
Eng.  or  a  related  field  &  3  yrs. 
exp.  in  the  job  offered  or  3  yrs. 
exp.  as  a  Consultant,  Assoc,  or 
Software  Eng.  Concurrent  exp. 
must  incl.  3  yrs.  exp.  designing  & 
implementing  internet  appls.  & 
3  yrs.  exp.  authoring  proj.  docu¬ 
mentation.  EOE.  40  hrs./wk.  8:00 
a.m.-5:00p.m  Send  resume  (no 
calls)  to:  Tracey  Friedman,  Di¬ 
mension  Data/Proxicom,  55 
Broad  St.,  5th  FI.,  New  York,  NY 
10004. 


♦ 


Computer 

As  a  $180  million  industry 
leader,  we  are  able  to  provide 
our  people  with  the  kind  of  work 
environment,  opportunities,  ben¬ 
efits,  growth  potential  and  pro¬ 
gressive  training  others  can't 
match.  We  are  looking  for  IT  pro¬ 
fessionals  with  a  minimum  of  1  + 
years  experience  for  the  follow¬ 
ing  job  titles: 

•  PROGRAMMER/ANALYST 

•  SYSTEMS  ANALYST 

•  SYSTEMS  PROGRAMMER 

•  DATABASE  ADMINISTRATOR 

•  DATABASE  ANALYST 

•  LAN  ADMINISTRATOR 
•SOFTWARE  ENGINEER 
•WEB  DEVELOPER  /  ARCHI¬ 
TECT 

•DATA  WAREHOUSING  AR¬ 
CHITECT 

•IT  PROJECT  MANAGER 

•  BUSINESS  ANALYST 
•SAP  FUNCTIONAL  AND 

TECHNICAL  EXPERTS 
•HIGH  LEVEL  SOLUTIONS 
SALES  EXECUTIVES 

•  QA/TESTER 
•TECHNICAL  RECRUITER 


Our  skill  sets  include: 
•CLIENT/SERVER 

•  ERP  -  SAP,  ORACLE,  PEO- 
PLESOFT 

•  INTERNET 

•  E-COMMERCE 
•MAINFRAME 
•MID-RANGE,  AS/400 
•CRM  -  SIEBEL 

•  DATA  MODELING 

Contact  the  Corporate  Head¬ 
quarters  for  positions  available 
in  the  following  areas:  Arizona, 
Colorado,  Connecticut,  Florida, 
Georgia,  Illinois,  Massachusetts, 
New  Jersey,  New  York,  North 
Carolina,  Pennsylvania,  Southern 
California,  Texas,  Virginia/DC. 

For  consideration  please  refer¬ 
ence  Job  Code:  RIRCW11 
and  send  your  resume  to:  RCG 
Information  Technology;  Attn: 
National  Recruiting,  379Thornall 
Street,  Edison,  NJ  08837;  FAX: 
(732)  744-3583  or  email  to: 
recruit@rcnit.com  We  are  an 
Equal  Opportunity  Employer. 
M/F/D/V. 

www.rcgit.com 
RCG  Information  Technology 


SYSTEMS  ANALYST  to  analyze, 
design,  develop,  test,  implement 
and  support  web  based  applica¬ 
tions  and  reports  based  on  busi¬ 
ness  requirements  and  functional 
specifications  using  HTML,  PL 
/SQL,  SQL  Server,  Oracle,  Java, 
JavaScript,  JSP,  Java  Servlets, 
EJB  and  WebLogic  under 
Windows  NT  operating  systems. 
Require:  B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  two  years  of  experience  in 
the  job  offered  or  as  a  Program¬ 
mer/Analyst.  Extensive  travel  on 
assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Send 
resume  to:  Stacy  Fluech,  HR 
Mgr.,  Nova  Information  Systems, 
One  Concourse  Pkwy.,  Ste.  300, 
Atlanta,  GA  30328;  Attn:  Job  KR. 


PROGRAMMER  ANALYSTS  for 
Arlington  Heights,  IL  office. 
Design,  develop  &  maintain 
software  applications  using 
Developer  2000,  Designer  2000, 
Visual  Basic,  Oracle,  Cobol, 
C++,  Erwin;  Develop  and  imple¬ 
ment  client/server  applications  in 
Oracle  Financials  and  using 
Oracle  tools  related  synchro¬ 
nization  techniques:  Develop 
relational  database  systems  in 
Oracle,  VB  and  Windows.  Unix 
environment.  Bachelors  Degree 
req'd  in  Computers,  Engineering 
or  related  field  of  study  +  2  yrs  of 
related  exp.  40  hrs/wk.  Must 
have  proof  of  legal  authority  to 
work  permanently  in  the  U.S. 
Send  resume  to  HR  Manager, 
Terasoft  International,  Inc..  201 5 
S.Arlington  Heights  Road,  #1 14, 
Arlington  Heights,  IL  60005. 


Software  engineer  to  design, 
develop  and  test  computer 
programs  for  business  applica¬ 
tions;  analyze  software  require¬ 
ments  to  determine  feasibility  of 
design;  direct  software  system 
testing  procedures  using 
expertise  in  XML.  JSP,  Oracle 
and  e'Gate  4.5.  Requirements: 
Bachelor's  Degree,  educational  or 
functional  equivalent,  in  Computer 
Science  or  related  field  and  two 
years  experience  as  a  software 
engineer  or  computer  program¬ 
mer,  knowledge  of  XML,  JSP, 
Oracle  and  e‘Gate  4.5.  Salary: 
$66, 000/year.  Working  Conditions: 
8:00  A.M.  to  5:00  P.M.,  40 
hours/week,  involves  extensive 
travel  and  frequent  relocation. 
Apply:  Director,  Pittsburgh/ 
Allegheny  Co.  CareerLink,  Attn: 
JS  Supervisor,  425  Sixth  Ave., 
Suite  2200,  Pittsburgh,  PA  15219. 
Job  No.  WEB274190. 


SOFTWARE  ENGINEER 

Software  engineer  to  design,  de¬ 
velop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  design; 
direct  software  system  testing 
procedures  using  expertise  in 
DB2,  CICS,  PL/1  and  SAS.  Re¬ 
quirements:  Bachelor's  Degree 
or  equivalent  in  Computer  Science 
or  related  field  and  two  years 
experience  as  a  software  engi¬ 
neer  or  computer  programmer, 
knowledge  of  DB2,  CICS,  PL/1 
and  SAS.  Salary:  $66, 000/year. 
Working  Conditions:  8:00  A  M. 
to  5:00  P.M.,  40  hours/week,  in¬ 
volves  extensive  travel  and  fre¬ 
quent  relocation.  Apply:  Manager, 
Washington  County  Team  PA 
CareerLink,  Millcraft  Center, 
Suite  150LL,  90  West  Chestnut 
Street,  Washington,  PA  15301- 
4517,  Job  No.  WEB274172. 


National  IT  Consulting  firm  has 
multiple  openings  in  the  follow¬ 
ing  areas: 

•  3-Tier  Developers 

•  Data-warehousing 

•  Web-based  applications  devel¬ 
opers 

•  Quality  Managers 

•  Technical  writers  &  Instruction¬ 
al  designers 

Senior  &  mid-level  positions 
available.  Competitive  salary 
commensurate  w/exp. 

Email  resumes  to: 
careers  @  spherion.com 


Vice  President 
Customer  Support 
&  Information 
Services 

B.S.  required  and  eight  years 
experience  in  the  job  ottered, 
or  as  a  Programmer/Analyst, 
Software  Engineer  or  similar 
occupation,  with  at  least  four 
of  those  years  managing  or 
directing  customer  technical 
support  and  information 
services  required.  Location: 
Irvine,  CA.  Employer:  Best 
Software.  Please  e-mail  re¬ 
sumes  to  hrhelpdesk@best 
sottware.com  and  reference 
VPCSS  in  the  subject  line. 
EOE. 


Calif,  based  IT  co.  has  openings 
at  its  Torrance  office  and  unan¬ 
ticipated  client  sites  across  the 
U.S.  for  Programmer/Analysts, 
Software  Engineers  and  Business 
Development  Consultants.  Send 
resume  with  salary  history 
and  requirements  to  RJT 
Compuquest,  23430  Hawthorne 
Blvd.,  #305,  Torrance,  CA 
90505,  ATTN:  Suzanne 


Talent  is 
the  fuel  of 
the  new 
economy. 

Fill  up 
with 

ITcareers. 


IT  careers  and 
IT  careers.com 
can  put  your 
message  in  front 
of  2/3  of  all  US 
IT  professionals. 
If  you  want  to 
make  hires, 
make  your  way 
into  our  pages. 
Call  Janis 
Crowley  at 
1-800-762-2977 

ITcareers 

where  the  best 
get  belter 


The  World 
Of  Work  Is 
Changing 
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Rich-Client  Apps 

environment  for  building  user 
interfaces  in  a  consistent  way. 

“We’re  not  going  to  go  com¬ 
pletely  back  to  Windows 
Forms.  We’re  going  to  evaluate 
where  it  makes  sense,”  said 
Lisa  Woerner,  another  applica¬ 
tion  analyst  at  Duke  Energy. 

It’s  not  just  the  Microsoft  en¬ 
vironment  that’s  seeing  a  re¬ 
surgence  of  rich-client  devel¬ 
opment.  Mark  Driver,  an  ana¬ 
lyst  at  Stamford,  Conn.-based 
Gartner  Inc.,  said  he  has  seen 
increased  use  of  client-side 
Java,  a  trend  he  began  noticing 
about  18  months  ago  as  users 
encountered  the  limits  of 
HTML  for  rich  GUIs. 

Daryl  Plummer,  also  a  Gart¬ 
ner  analyst,  said  developers 
should  get  as  far  as  they  can 
with  HTML,  scripting  lan¬ 
guages  and  their  design  skills 


in  developing  thin  clients  and 
move  to  richer  clients  when 
they  see  a  clear  need. 

“Microsoft  and  others  led  all 
of  us  down  the  path  of  Web 
apps,  and  we  went  happily,”  he 
said.  “But  Microsoft  had  to 
make  sure  that  they  didn’t  lose 
their  value  proposition,  which 
was  the  desktop.  So  they  had  to 
find  a  way  to  retain  the  Web 
dominance  and  bring  back  the 
rich  client,  which  kept  their  PC 
desktop  domination  alive.” 

Taking  Notice 

Among  the  .Net  framework 
features  that  caught  the  atten¬ 
tion  of  developers  attending 
last  week’s  VSLive  and  Gartner 
application  development  con¬ 
ferences  here  were  “no-touch” 
deployment  and  the  new  plat¬ 
form’s  ability  to  run  old  and 
new  application  components 
side  by  side  so  that  old  applica¬ 
tions  won’t  break  when  new 
applications  or  application 
components  are  installed. 


Microsoft  and 
others  led  all 
of  us  down  the 
path  of  Web 
apps,  and  we 
went  happily. 

DARYL  PLUMMER,  ANALYST, 
GARTNER  INC. 

Although  those  features 
shipped  with  the  .Net  frame¬ 
work  in  February,  several  de¬ 
velopers  said  they  didn’t  take 
note  of  them,  since  Microsoft’s 
marketing  efforts  focused  on 
Web  services  and  applications. 

Last  week,  however,  Brian 
Siler,  a  lead  analyst  in  execu¬ 
tive  information  systems  in 


Memphis  for  Hilton  Hotels 
Corp.,  said  he  sensed  that  Mi¬ 
crosoft  was  trying  to  push  its 
rich-client  story.  But  even 
though  Siler  said  that  the  .Net 
framework  could  help  his 
group  develop  “cool  things” 
such  as  calendar  pop-up  win¬ 
dows,  he  added  that  he  knows 
he  also  has  to  consider  the 
“practical  problem”  of  distrib¬ 
uting  the  roughly  20MB  .Net 
framework  to  clients,  some  of 
which  use  dial-up  connections. 
“It’s  not  bad  if  you’re  on  a  net¬ 
work,”  he  said. 

The  .Net  framework  is  cur¬ 
rently  shipping  only  with  the 
first  Windows  XP 
Service  Pack,  which 
was  released  just 
two  weeks  ago. 

Most  corporate 
users  aren’t  run¬ 
ning  that  operating 
system. 

David  Chamberlain,  a  senior 
developer  at  Baker  &  Hostetler 
LLP,  a  law  firm  in  Cleveland, 


said  his  company  has  about 
1,400  users,  and  he  believes  the 
download  could  be  difficult. 
But  he  said  he’s  interested  in 
exploring  the  possibilities  the 
.Net  framework  brings,  “if  the 
deployment  works  as  well  as 
I’ve  seen  in  the  demos,”  since 
Windows  client/server  appli¬ 
cation  deployment  has  often 
taken  six  months  to  a  year. 

But  some  users  remain  wary. 
Andy  Paisley,  director  of  appli¬ 
cation  development  at  Dollar 
Tree  Stores  Inc.  in  Chesapeake, 
Va.,  said  he  doesn’t  want  to  use 
Microsoft  tools  for  desktop  ap¬ 
plication  development  because 
they’re  proprietary 
and  he  prefers  to 
have  more  than  one 
vendor  competing 
for  his  business. 
Paisley  also  ex¬ 
pressed  skepticism 
that  the  framework  can  do  all 
that  Microsoft  says  it  will  to 
help  with  client-side  applica¬ 
tion  deployment.  ► 


PROBLEM  SOLVED 

How  Microsoft  addresses 
problems  with  rich-client  apps: 

O  QuickLink  33058 
www.computerworld.com 
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Cyberdefense 

“What  happened  here?” 
asked  Wyatt  Starnes,  CEO  of 
Tripwire  Inc.,  a  Portland,  Ore.- 
based  global  IT  security  com¬ 
pany.  “We  thought  we  were  go¬ 
ing  to  get  something  concrete. 
They  probably  underestimated 
the  politics.” 

For  example,  although  the 
strategy  calls  on  corporate 
CEOs  to  establish  enterprise 
security  councils  to  integrate 
cybersecurity,  physical  securi¬ 
ty  and  privacy  into  their  daily 
operations,  compliance  re¬ 
mains  voluntary. 

Russ  Cooper,  a  security  con¬ 
sultant  at  TruSecure  Corp.  in 
Herndon,  Va.,  said  he’s  dissatis¬ 
fied  with  the  strategy  in  its  cur¬ 
rent  form.  Specifically,  Cooper 
said  the  administration  has  re¬ 
moved  language  that  would 
have  offered  a  definition  of  lia¬ 
bility  and  an  assignment  of  re¬ 
sponsibility  for  Internet  securi¬ 


ty.  “It’s  time  the  government 
mandates  some  action  be  tak¬ 
en,”  said  Cooper.  “I’d  like  to  see 
ISPs  be  told  that  it  is  illegal  to 
carry  identified  Internet  attack 
traffic.  But  I  don’t  see  anything 
similar  or  at  that  level  in  what 
they’re  proposing.” 

James  Lewis,  director  of  the 
Council  on  Technology  and 
Public  Policy  at  the  Center  for 
Strategic  &  International  Stud¬ 
ies  in  Washington,  agreed  that 
having  cybersecurity  depen¬ 
dent  on  voluntary  compliance 
can’t  bring  real  change  in  the 
long  run.  “The  report  has  many 
good  ideas,  but  cybersecurity  is 
too  tough  a  problem  for  a  solely 
voluntary  approach  to  fix,”  he 
said.  “Companies  will  only 


FOCUS  ON  CYBERDEFENSE 

Tech  Chiefs  Weigh  In:  The  CIOs  of 
Cingular  Wireless  and  Six  Continents 
Hotels  discuss  post-Sept.  11  security: 

QuickLink  33068 

Lessons  Learned:  How  the  experience  of 
Sept.  11  molded  the  White  House's  strategy: 

QuickLink  33014 

www.computerworld.com 


change  their  behavior  when 
there  are  both  market  forces 
and  legislation  that  cover  secu¬ 
rity  failures.” 

Despite  the  disappointment 
voiced  by  some,  others  said  the 
strategy  is  a  key  development 
that  demonstrates  solid  govern¬ 
ment  leadership. 

A  Good  Place  to  Start 

“You  have  to  look  at  this  as  a 
good  starting  point,”  said  Scott 
Crenshaw,  a  vice  president  at 
NTRU  Cryptosystems  Inc.,  a 
security  firm  in  Burlington, 
Mass.  “For  example,  the  sec¬ 
tion  on  assessment  of  current 
gaps  and  weaknesses  in  the 
private  sector  is  particularly 
strong.  If  this  document  raises 
awareness  of  those  issues,  it 
will  have  served  us  well.” 

Scott  Charney,  chief  security 
strategist  at  Microsoft  Corp., 
also  applauded  the  strategy  as 
a  critical  first  step.  “It’s  really 
important  to  get  the  vision 
piece  right.  People  need  time 
to  sit  down  with  the  document 
to  debate  the  pros  and  cons,” 


he  said,  referring  to  the  two- 
month  review  period  before 
the  final  version  is  sent  to  the 
president  for  approval.  All  rea¬ 
sonable  recommendations  will 
have  an  impact  on  the  shape 
and  direction  of  the  strategy, 
Charney  said. 

That  may  have  been  part  of 
the  plan  all  along,  said  a  busi¬ 
ness  executive  who  requested 
anonymity.  It  could  be  that  re¬ 
leasing  the  strategy  in  draft 
form  was  a  calculated  move  by 
Richard  Clarke,  chairman  of  the 
president’s  Critical  Infrastruc¬ 
ture  Protection  Board,  to  gauge 
the  reaction  of  the  private  sec¬ 
tor  and  determine  if  there  is 
enough  political  support  to  put 
teeth  into  the  recommenda¬ 
tions,  the  executive  said. 

Clarke  is  very  skilled  at  deal¬ 
ing  with  both  the  government 
and  private  sector,  said  Gene 
Hodges,  CEO  of  Network  Asso¬ 
ciates  Inc.  in  Santa  Clara,  Calif. 
“Richard  [Clarke]  is  walking  a 
fine  line  between  patting  peo¬ 
ple  on  the  back  and  kicking 
them  in  the  butt,”  he  said.  I 


Recommendations 

According  to  the  plan,  large 
corporations  should: 

FORM  enterprisewide  corporate 

security  councils. 

T!'  ■  .  .  .  :  -  '  ■  .  .  ■  \ 

PERFORM  regular  independent 
IT  security  audits,  remediation 
programs  and  reviews  of  “best 
practices”  implementation. 

FORM  board  committees  on  IT 
security  and  ensure  that  the 
recommendations  of  the  chief 
information  security  official  in  the 
corporation  are  regularly  re¬ 
viewed  by  the  CEO. 

ENSURE  that  corporate  IT  conti¬ 
nuity  plans  are  regularly  re¬ 
viewed  and  exercised,  and 

consider  site  and  staff  alterna¬ 
tives.  Consideration  should  be  giv¬ 
en  to  diversity  in  IT  service  pro¬ 
viders  as  a  way  of  mitigating  risks. 

TAKE  PART  IN  public/private 
partnership  programs  to  establish 
an  awards  program  for  those  in 
the  industry  who  are  making  signifi¬ 
cant  contributions  to  cybersecurity. 
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Paradigm  Lost? 

IS  COBOL  DEAD?  Not  if  you  believe  the  readers  who  wrote  to 
object  after  I  suggested  in  a  recent  column  that  “some  IT 
practices  and  job  titles  will  go  the  way  of  punched  cards, 
Cobol  and  green  screens”  [QuickLink  32513].  One  reader  told 
me,  “Cobol  is  alive  and  healthy.  Oh,  we  use  Web  front  ends, 
all  of  our  data  is  on  Oracle  and  our  development  staff  uses  a  com¬ 
bination  of  desktop  and  server  tools  in  their  work.  But  the  industri¬ 
al-strength  grunt  work  is  Cobol  on  Unix  servers.  We  haven’t  found 
anything  that  can  handle  batch  data  in  a  more  effective  manner.” 


“I  suggest  you  check  your  facts,”  wrote  an¬ 
other  reader.  “Despite  the  barrels  of  ink  claim¬ 
ing  otherwise,  the  business  world  still  runs  on 
Cobol.”  Still  another  said,  “There  continues  to 
be  this  perception  in  the  media  that  Cobol  is 
dead.  It’s  very  much  alive  and  very  much  being 
evolved.  Take  note  of  the  vendors  (Fujitsu  and 
Acucorp,  for  example)  who  have  now  ported 
this  language  to  the  Linux  operating  system.  I 
don’t  think  it’s  going  away  anytime  soon.” 

OK,  let’s  be  clear  on  this:  Cobol  isn’t  dead. 

It’s  not  at  death’s  door.  It’s  not  even  sick.  It’s 
still  an  IT  workhorse. 

But  let’s  be  clear  on  this,  too:  As  recently  as  a 
decade  ago,  Cobol  was  the  king  of  large-scale 
development.  Now  it’s  not.  And  Cobol’s  throne 
wasn’t  usurped  by  PL/1  or  any  other  competing 
language.  Cobol  lost  its  place  to  SAP  and  Peo- 
pleSoft  and  Siebel  and  Baan  and  other  pack¬ 
aged  enterprise  applications. 

IT  shops  stopped  building  those  big  projects 
and  started  buying.  Our  paradigm  shifted,  and 
Cobol  lost  its  place  at  the  core  of  corporate  IT. 

Dead?  No.  Demoted  from  king  to  hard-work¬ 
ing  commoner?  Yes. 

Now,  here’s  a  more  interesting  question: 
Could  King  Cobol  ever  come  back? 

Answer:  Maybe.  Remember,  just 
because  a  paradigm  shifts  doesn’t 
mean  the  original  paradigm’s  lost. 

IT  shifted  to  packaged  apps  be¬ 
cause  they  were  less  expensive  (we 
hoped)  and  more  standardized  than 
the  aging  custom  Cobol  code  they 
replaced.  After  all,  accounting  is 
accounting.  Inventory  is  inventory. 

Billing  is  billing.  Why  reinvent 
these  routine  business  wheels  over 
and  over? 

Why  indeed?  There  was  a  reason 
companies  built  those  custom  sys¬ 
tems  in  the  first  place.  They  wanted 


to  gain  a  competitive  advantage  by  fine-tuning 
their  business  processes  in  ways  their  competi¬ 
tion  couldn’t  easily  match. 

The  classic  example  is  MCI’s  original  “Friends 
&  Family”  program  from  just  a  decade  ago.  It 
was  essentially  a  specialized  billing  system  for 
long-distance  calls.  AT&T’s  oh-so-ordinary 
billing  system  couldn’t  track  “calling  circles” 
the  way  MCI’s  custom  system  could.  So  MCI 
got  its  foothold  in  long  distance  by  customizing 
a  routine  accounting  process. 

You  can’t  get  that  kind  of  advantage  with  an 
enterprise  package.  Any  competitor  can  buy  the 
same  software.  Whatever  you  do  to  specially 
configure  it,  your  competition  can  do  the  same. 

If  you  want  any  chance  at  a  unique  business 
advantage,  you’ll  have  to  build  it  yourself.  And 
that  means  build-it-yourself  enterprise  applica¬ 
tions  just  might  make  a  comeback. 

Yes,  that  would  be  another  paradigm  shift. 
CEOs  and  deep-thinking  business  gurus  would 
have  to  decide  that  there’s  a  limit  to  the  advan¬ 
tages  of  cost-cutting  and  that  the  new  way  to 
get  competitive  advantage  from  IT  is  pursuing 
unique  business  processes  that  only  custom  en¬ 
terprise  apps  can  deliver. 

That  won’t  come  this  year  —  not  in  this 
economy.  But  watch  for  it.  Para¬ 
digms  keep  shifting.  And  with 
modern  design  tools  and  develop¬ 
ment  techniques,  and  without  the 
albatross  of  decades-old  legacy 
code  that’s  a  nightmare  to  main¬ 
tain,  Cobol  wouldn’t  be  a  bad  pick 
as  the  language  of  choice  for  the 
next  wave  of  big  custom  develop¬ 
ment  projects.  After  all,  it’s  mature. 
It’s  familiar.  It  can  do  the  job. 

And  who  knows?  Commoner 
Cobol  just  might  have  a  shot  at  be¬ 
coming  the  king  of  corporate  IT  all 
over  again.  I 


frank  hayes,  Computer- 
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frank.hayes@computerworld.com. 


Hey,  Get  a  Room! 

Furious  boss  tells  IT  pilot  fish  to  find  out  what’s  wrong 
with  office  admin’s  computer.  Office  admin  schedules 
all  conference  rooms,  but  she  isn’t  receiving  boss’s 
e-mailed  requests,  so  his  meetings  don’t  get  a  room. 
Fish  spots  the  problem  when  he’s  forwarded  copies  of 
boss’s  messages.  “Turns  out  he  doesn’t  know  how  to 
use  the  address  book,  so  he's  hand-typing  her  e-mail 
address  every  time,”  says  fish.  “And  misspelling  it.” 

Take  Five  « 
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plant  are  printed 
each  night  on  an 
old  ribbon  printer.  But 
why  are  you  requesting 
five-part  forms?  pilot 
fish  at  headquarters 
asks  user.  You  probably 
can’t  even  print  through 
that  many  sheets  of  pa¬ 
per.  “Well,  the  ribbon 
broke  a  while  back,”  says 
user.  “And  it  really  isn’t 
a  bother  to  peel  off  and 
discard  the  top  copy.” 

Priorities 

There’s  a  malfunction  at 
this  highly  computerized 
lumber  mill,  damaging 
both  the  automation 
controls  and  the  system 
that  tracks  downtime. 
“When  I  started  to  repair 
the  automation  system 
so  the  machine  would 
restart,  I  was  reprimand¬ 
ed,”  says  IT  pilot  fish. 
“Management  preferred 
to  have  me  fix  the  down¬ 
time  tracking  system 
first.”  Result:  Mill  now 
has  highly  accurate  rec¬ 
ords  of  the  worst  down¬ 
time  in  the  company. 

Oh,  THAT! 

“If  I  have  e-mail,  no 
one’s  told  me  about  it,” 
automobile  dealership 
sales  manager  grumbles 
to  his  boss.  You  spent 
hours  learning  it  yester¬ 
day,  pilot  fish  boss  re¬ 
minds  him.  “That  was 


e-mail?”  says 
sales  manager. 
“How  am  I 
supposed  to 
remember  all 


that?  What  does  that 
have  to  do  with  selling 
cars,  anyway?  Nobody 
uses  that.” 

Too  Sneaky 

“My  machine  just  does¬ 
n’t  look  right,”  user  tells 
IT  pilot  fish.  No  wonder, 
says  fish  -  there’s  no 
driver  for  your  video 
card.  Why  did  you  re¬ 
move  the  program  called 
“Diamond  Stealth  III”? 
User  replies,  “I  didn’t 
like  the  idea  of  some¬ 
thing  called  ‘Stealth’  on 
my  PC.” 

Knucklehead! 

Programmer  pilot  fish 
has  just  finished  auto¬ 
mating  a  key  monthly  fi¬ 
nancial  report  -  now  it’s 
produced  in  hours,  not 
weeks.  Next,  his  junior- 
VP  boss  asks  him  to 
change  the  job  titles  in 
the  report  from  senior 
and  junior  VP  to  execu¬ 
tive  VP  and  VP.  “What 
kind  of  knucklehead  re¬ 
quested  such  a  mean¬ 
ingless  change  when  so 
many  important  proc¬ 
esses  need  to  be  re¬ 
vised?”  grumps  fish.  I 
did,  replies  boss.  Says 
fish,  “That  was  the  last 
time  I  was  called  to  dis¬ 
cuss  proposed  changes 
in  person.” 


©FEED  THE  SHARK!  Send  your  true  tale  of  IT  life  to 
sharky@computerworld.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for  Shark  Tank  home  delivery  at 

computerworld.com/sharky. 


100%  Dell  performance  and  reliability. 
Up  to  50%  less  than  the  competition 

PowerConnect  Switches.. .100%  no-brainer. 
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Right  now,  get  $100  off  Dell's 
NEW  PowerConnect  Switches. 


Dell  |  Managed  Switches 

PowerConnect™  3024*  Switch 

Scalable,  High-Performance  Managed  Switches 

•  24  Fast  Ethernet  Ports  Plus  2  Built-In  Gigabit”  Uplinks 

•  Up  to  12.8  Gbps  of  Wire-Speed  Switching  Capacity 

•  Stackable  (Supports  up  to  144  FE  Ports  in  a  Stack) 

•  Remote  Access  and  Management  Capabilities 

•  3-Yr  Next  Business  Day  Unit  Replacement” 

as  l°w  as  $20/mo.,  (46  pmts?”)  60  Days 
Same-As-Cash  for  qualified  customeis 

WWW  E-VALUE  Code:  12880- $10906 


PowerConnect™  3248*  Switch 

NEW  High-Performance  Enterprise  Class  Managed  Switches 

•  48  Fast  Ethernet  Ports  Plus  2  Built-In  Gigabit*1  Uplinks 

•  Multi-Layer  Traffic  Classification  at  Layers  2,  3.  and  4 

•  Advanced  Management  via  Browser  or  Industry-Standard  CLI 

•  3-Yr  Next  Business  Day  Unit  Replacement” 

•  Sale  Price  Includes  $100  Discount 

pa  f  \  as  low  as  $40/mo„  (46  pmts?")  60  Days 

Al  ctltl  Same-As-Cash  for  qualified  customers 

I  WWW  E-VALUE  Code:  12880-  S10913 


PowerConnect™  3048*  Switch 

NEW  Rack-Dense,  High-Performance  Managed  Switches 

•  48  Fast  Ethernet  Ports  Plus  4  Built-In  Gigabit”  Uplinks 

•  Up  to  21.6  Gbps  of  Wire-Speed  Switching  Capacity 

•  Stackable  (Supports  up  to  144  FE  Ports  in  a  Stack) 

•  3-Yr  Next  Business  Day  Unit  Replacement” 

•  Sale  Price  Includes  $100  Discount 

A  M  pa  ^  ^  as  low  as  S34/mo.,  (46  pmts1")  60  Days 
5  I  iMM  Same-As-Cash  for  qualified  customers 

Iw  W  E-VALUE  Code:  12880-  S10911 


PowerConnect™  5224*  Switch 


NEW  High-Performance  All-Gigabit9  Managed  Switches 

•  24  Copper  Gigabit*  Ports  Plus  4  SFP  Fiber  Uplinks 

•  Layer-3  Aware  Class  of  Service  Prioritization 

•  Advanced  Management  via  Browser  or  Industry  Standard  CLI 

•  3-Yr  Next  Business  Day  Unit  Replacement” 

•  Sale  Price  Includes  $100  Discount 

as  low  as  $68/mo„  (46  pmts.1")  60  Days 
^  M  Same-As-Cash  for  qualified  customers 

bWWW  E-VALUE  Code:  12880-  S10923 


on  to  do  more  than  just  save  money.  Just  what  you'd  expect  from  Dell,  proven  technology 
that  cuts  costs.  So  whether  you're  building  your  first  network  or  expanding  your  existing  one, 
Dell  PowerConnect  managed  switches  can  handle  your  busy  organization  and  help  you  save 
money.  Equipped  with  the  latest  industry-standard  technology,  PowerConnect  switches  are 
highly  interoperable  and  easily  integrate  into  an  existing  network.  They're  scalable  for  future 
growth  and  have  easy-to-use  management  features  to  help  you  improve  network  up-time 
and  security.  PowerConnect  switches  include  Next  Business  DayK  Unit  Replacement  and, 
of  course,  they're  all  backed  with  Dell's  service  and  support.  Choosing  Dell  PowerConnect 
switches  means  you  won't  have  to  sacrifice  performance  for  price.  And  that's  a  concept 
you'll  definitely  want  to  plug  into. 


VALUE 


USE  THE  POWER  OF 
THE  E-VALUE  CODE. 

Match  our  latest  technology 
with  our  latest  prices.  Enter  the 
E-VALUE  code  online  or  give  it 
to  your  sales  rep  over  the 
phone,  www.dell.com/evalue 


Growing  your  network.  Easy  as 


Visit  www.dell.com/switch  or  call  toll  free  1-877-410-3355. 


Call:  M-F  7a-9p|Sat  8a-5|i  CT. 

Pricing,  specifications,  availability,  and  terms  of  offer  may  change  without  notice.  Taxes  and  shipping  charges  extra,  and  vary.  U  S.  new  purchases  only  LIMIT  5  DISCOUNTED  OR  PROMOTIONAL  ITEMS  PER  CUSTOMER.  In  case  of  customers  leasing  under  these  promotions,  please  rv.:-  hot  items  'eased 
will  be' subject  to  applicable  end-of-lease  options  or  requirements  Dell  cannot  be  responsible  for  errors  in  typography  or  photography. 

"This  device  has  not  been  approved  by  the  Federal  Communications  Commission  for  use  in  a  residential  environment.  Tin's  device  is  not.  and  may  not  be,  offered  for  sale  or  lease,  or  sold  or  leased  for  use  in  a  residential  environment  until  the  approval  of  the  FCC  has  been  obtained, 

"'Monthly  payment  based  on  48-month  QuickLoan  at  12.93%  interest  rate  for  qualified  Small  Business  customers.  Your  interest  rate  and  monthly  payment  may  be  same  or  higher, tlepunding  on  your  creditworthiness.  Minimum  transaction  size  of  $500  required.  Maximum  aggregate  financed  amount  not  to  ov  i «d 
$25,000.  Under  80  Days  Same-As-Cash  QuickLoan,  interest  accrues  during  first  60  days  after  QuickLoan  Commencement  Date  (which  is  five  days  after  product  snips)  if  balance  not  paid  within  these  60  days.  OFFER  VARIES  BY  CREDITWORTHINESS  OF  CUSTOMER  AS 
DETERMINED  BY  LENDER  Taxes,  fees  and  shipping  charges  are  extra  and  may  vary  Not  valid  on  past  orders  or  financing  QuickLoan  arranged  by  CIT  Online  Bank  to  Small  Business  customers  witli  approved  credit  This  term  indicates  compliance  with  IEEE  standard  802  3on  for  Gigabit  Ethernet,  and  dot  .  not 
connote  actual  operating  speed  of  1  Gb/sec.  For  high  speed  transmission,  connection  to  a  Gigabit  Ethernet  server  and  network  infrastructure  is  required  1  Service  or  replacement  unit  (depending  on  service  contract)  may  be  provided  by  third-party  provider.  Technician  or  replacement  unit  will  be  (lispatr: -si  il 
necessary  following  phone-based  troubleshooting.  To  receive  next  business  day  service,  Dell  must  notify  the  sendee  provider  before  5pm  (depending  on  service  contract)  customer  tune  Availability  varies.  Dell,  the  stylized  E  logo,  E-VALUE,  and  PowerConnect  are  trademarks  of  Dell  Computer  Corporation  $20K 
Dell  Computer  Corporation.  All  rights  reserved. 


Get  the  Price/Performance  Advantage 

With  Oracle,  Dell  and  Red  Hat 


“Those  running  Oracle,  Dell,  and 
Red  Hat  Linux  have  a  price/performance 
advantage.  Users  can  buy  four  4- way 
Dell  servers  running  Oracle  and  Linux 
with  exceptional  performance  for  less 
than  a  12  or  16 -way  proprietary  SMP 
system  at  a  hefty  savings.” 

Aberdeen  Group 

June  2002 


D*LL  *  redhat. 


Learn  more  about  an  Oracle 
certified  configuration  for 
Dell  with  Red  Hat  Linux 
Advanced  Server. 


oracle.com/linux/dell 


1.800.633.0567 
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